CLI Reference Guide-R07

Chapter 10 | Access Control Lists
ARP ACLs
– 353 –
Example
Console(config)#access-list arp factory
Console(config-arp-acl)#
Related Commands
permit, deny (353)
show access-list arp (354)
permit, deny (ARP ACL) This command adds a rule to an ARP ACL. The rule filters packets matching a
specified source or destination address in ARP messages. Use the no form to
remove a rule.
Syntax
[no] {permit | deny} ip
{any | host source-ip | source-ip ip-address-bitmask}
{any | host destination-ip | destination-ip ip-address-bitmask}
mac {any | host source-mac | source-mac mac-address-bitmask}
[any | host destination-mac | destination-mac mac-address-bitmask] [log]
This form indicates either request or response packets.
[no] {permit | deny} request
ip {any | host source-ip | source-ip ip-address-bitmask}
{any | host destination-ip | destination-ip ip-address-bitmask}
mac {any | host source-mac | source-mac mac-address-bitmask}
[any | host destination-mac | destination-mac mac-address-bitmask] [log]
[no] {permit | deny}
response
ip {any | host source-ip | source-ip ip-address-bitmask}
{any | host destination-ip | destination-ip ip-address-bitmask}
mac {any | host source-mac | source-mac mac-address-bitmask}
[any | host destination-mac | destination-mac mac-address-bitmask] [log]
source-ip – Source IP address.
destination-ip – Destination IP address with bitmask.
ip-address-bitmask
7
– IPv4 number representing the address bits to match.
source-mac – Source MAC address.
destination-mac – Destination MAC address range with bitmask.
mac-address-
bitmask
7
– Bitmask for MAC address (in hexadecimal format).
log - Logs a packet when it matches the access control entry.
Default Setting
None
7. For all bitmasks, binary “1” means relevant and “0” means ignore.