Cisco Nexus 7000 Series Security Command Reference - Cisco Nexus 7000 Series Command Reference Manual

D Commands
any
host sender-IP
sender-IP sender-IP-mask
mac
host sender-MAC
sender-MAC sender-MAC-mask
log
request
response
(Optional) Specifies that any host matches the part
of the rule that contains the any keyword. You can
use the any to specify the sender IP address, target
IP address, sender MAC address, and target MAC
address.
(Optional) Specifies that the rule matches ARP
packets only when the sender IP address in the packet
matches the value of the sender-IP argument. Valid
values for the sender-IP argument are IPv4 addresses
in dotted-decimal format.
(Optional) IPv4 address and mask for the set of IPv4
addresses that the sender IP address in the packet can
match. The sender-IP and sender-IP-mask argument
must be given in dotted-decimal format. Specifying
255.255.255.255 as the sender-IP-mask argument is
the equivalent of using the host keyword.
Introduces the MAC address portion of the rule.
(Optional) Specifies that the rule matches ARP
packets only when the sender MAC address in the
packet matches the value of the sender-MAC
argument. Valid values for the sender-MAC argument
are MAC addresses in dotted-hexadecimal format.
(Optional) MAC address and mask for the set of MAC
addresses that the sender MAC address in the packet
can match. The sender-MAC and sender-MAC-mask
argument must be given in dotted-hexadecimal
format. Specifying ffff.ffff.ffff as the
sender-MAC-mask argument is the equivalent of using
the host keyword.
(Optional) Specifies that the device logs ARP packets
that match the rule.
(Optional) Specifies that the rule applies only to
packets containing ARP request messages.
If you omit both the request and the
Note
response keywords, the rule applies to all
ARP messages.
(Optional) Specifies that the rule applies only to
packets containing ARP response messages.
If you omit both the request and the
Note
response keywords, the rule applies to all
ARP messages.

Cisco Nexus 7000 Series Security Command Reference

deny (ARP)
225