Ingress-Acl Extend Rule Type-Arp - Zte ZXR10 5250 Series Command Reference Manual

4.13.17 ingress-acl extend rule type-arp

Purpose
This command sets the rule that the extended ingress ACL is used to match ARP
messages.
Command Mode
Extended ingress ACL configuration mode
Syntax
rule <1-500>{permit | deny} arp {<sender-ipaddr><sip-mask>| any}{<target-ipaddr><tip-mask
>| any}
Parameter Description
Parameter
<1-500>
permit
deny
arp
<sender-ipaddr>
<sip-mask>
any (first)
<target-ipaddr>
<tip-mask>
any (second)
Guidelines
The ARP rule can match ARP packets with sender-specified IP addresses, IP address of
any sender, specified destination IP addresses, or any destination IP address.
SJ-20131111172707-003|2013-11-27 (R1.0)
Description
Rule number.
If the condition matches, access is permitted.
If the condition matches, access is denied.
This rule only matches ARP message. Non-ARP message
ignores this rule.
Sender network or host of the ARP package. It is a 32-bit IP
address expressed in dotted decimal notation.
Source mask and used for source. It is a 32-bit IP address
expressed in dotted decimal notation.
The any keyword is used as the abbreviation of the source 0.0.0.0
and the source mask 0.0.0.0.
Target network or host of the ARP package. It is a 32-bit IP
address expressed in dotted decimal notation.
Destination mask used for destination. It is a 32-bit IP address
expressed in dotted decimal notation.
The any keyword is used as the abbreviation of the destination
0.0.0.0 and the destination mask 0.0.0.0.
4-227
Chapter 4 Service Configuration
ZTE Proprietary and Confidential