Edge-Core ES3528MV2 Management Manual page 971

R
ELATED
permit, deny (971)
show access-list arp (972)
This command adds a rule to an ARP ACL. The rule filters packets matching
permit, deny
a specified source or destination address in ARP messages. Use the no
(ARP ACL)
form to remove a rule.
S
YNTAX
[no] {permit | deny}
This form indicates either request or response packets.
[no] {permit | deny} request
[no] {permit | deny} response
D
EFAULT
None
C
OMMAND
ARP ACL
C
OMMAND
New rules are added to the end of the list.
21. For all bitmasks, binary "1" means relevant and "0" means ignore.
C
OMMANDS
ip {any | host source-ip | source-ip ip-address-bitmask}
mac {any | host source-mac | source-mac mac-address-bitmask}
[log]
ip {any | host source-ip | source-ip ip-address-bitmask}
mac {any | host source-mac | source-mac mac-address-bitmask}
[log]
ip {any | host source-ip | source-ip ip-address-bitmask}
{any | host destination-ip | destination-ip ip-address-bitmask}
mac {any | host source-mac | source-mac mac-address-bitmask}
[any | host destination-mac | destination-mac mac-address-
bitmask] [log]
source-ip – Source IP address.
destination-ip – Destination IP address with bitmask.
ip-address-bitmask – IPv4 number representing the address bits
21
to match.
source-mac – Source MAC address.
destination-mac – Destination MAC address range with bitmask.
mac-address-bitmask
21
format).
log - Logs a packet when it matches the access control entry.
S
ETTING
M
ODE
U
SAGE
– 971 –
C 26
HAPTER
– Bitmask for MAC address (in hexadecimal
| Access Control Lists
ARP ACLs