Owners manual

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
234
-
(Optional) Specifies a range of interfaces. No space is allowed before
and after the hyphen.
acl-match
Specifies the logging criteria for packets that are dropped or permitted
based on ACL matches.
acl-match permit
Specifies logging when permitted by the configured ACL.
acl-match all
Specifies logging when permitted or denied by the configured ACL.
acl-match none
Specifies that ACL-matched packets are not logged.
dhcp-bindings
Specifies the logging criteria for packets dropped or permitted based
on matches against the DHCP bindings.
dhcp-bindings permit
Specifies logging when permitted by DHCP bindings.
dhcp-bindings all
Specifies logging when permitted or denied by DHCP bindings.
dhcp-bindings none
Specifies to prevent the logging of all packets permitted or denied by
DHCP bindings.
Default
All denied or dropped packets are logged.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
Use the no form of this command to reset some of the logging criteria to their defaults. If not specified, all
the logging types are reset to log on when the ARP packets are denied.
Example
This example shows how to configure an ARP inspection on VLAN 1 to add packets to a log that matches
the ACLs.
Switch# configure terminal
Switch(config)# ip arp inspection vlan 1 logging acl-match all
Switch(config)#
25-11 permit | deny (arp access-list)
This command is used to define the ARP permit entry. Use the deny command to define the ARP deny
entry. Use the no form of the command to remove an entry
{permit | deny} ip {any | host SENDER-IP | SENDER-IP SENDER-IP-MASK} mac {any | host
SENDER-MAC | SENDER-MAC SENDER-MAC-MASK}
no {permit | deny} ip {any | host SENDER-IP | SENDER-IP SENDER-IP-MASK} mac {any | host
SENDER-MAC | SENDER-MAC SENDER-MAC-MASK}
Parameters
ip any
Specifies to match any source IP address.