Arp Access-List - Cisco ME 3400 Command Reference Manual

Chapter 2 Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands

arp access-list

Use the arp access-list global configuration command to define an Address Resolution Protocol (ARP)
access control list (ACL) or to add clauses to the end of a previously defined list. Use the no form of this
command to delete the specified ARP access list.
Syntax Description
acl-name
Defaults
No ARP access lists are defined.
Command Modes Global configuration
Command History Release
12.2(25)EX
12.2(50)SE
Usage Guidelines After entering the arp access-list command, you enter ARP access-list configuration mode, and these
configuration commands are available:
•
•
•
•
•
Use the permit and deny access-list configuration commands to forward and to drop ARP packets based
on the specified matching criteria.
When the ARP ACL is defined, you can apply it to a VLAN by using the ip arp inspection filter vlan
global configuration command. ARP packets containing only IP-to-MAC address bindings are compared
to the ACL. All other types of packets are bridged in the ingress VLAN without validation. If the ACL
permits a packet, the switch forwards it. If the ACL denies a packet because of an explicit deny
statement, the switch drops the packet. If the ACL denies a packet because of an implicit deny statement,
the switch compares the packet to the list of DHCP bindings (unless the ACL is static, which means that
packets are not compared to the bindings).
OL-9640-10
arp access-list acl-name
no arp access-list acl-name
Name of the ACL.
Modification
This command was introduced.
The command was supported in the metro base image.
default: returns a command to its default setting.
deny: specifies packets to reject. For more information, see the
configuration)" section on page
exit: exits ARP access-list configuration mode.
no: negates a command or returns to the default settings.
permit: specifies packets to forward. For more information, see the
configuration)" section on page
2-76.
2-305.
Cisco ME 3400 Ethernet Access Switch Command Reference
arp access-list
"deny (ARP access-list
"permit (ARP access-list
2-15