2-20
Catalyst 3750 Switch Command Reference
OL-8552-07
Chapter 2 Catalyst 3750 Switch Cisco IOS Commands
arp access-list
arp access-list
Use the
arp access-list
global configuration command to define an Address Resolution Protocol (ARP)
access control list (ACL) or to add clauses to the end of a previously defined list. Use the
no
form of this
command to delete the specified ARP access list.
arp access-list
acl-name
no arp access-list
acl-name
Syntax Description
Defaults
No ARP access lists are defined.
Command Modes
Global configuration
Command History
Usage Guidelines
After entering the
arp access-list
command, you enter ARP access-list configuration mode, and these
configuration commands are available:
•
default
: returns a command to its default setting.
•
deny
: specifies packets to reject. For more information, see the
configuration)” section on page 2-111
.
•
exit
: exits ARP access-list configuration mode.
•
no
: negates a command or returns to default settings.
•
permit
: specifies packets to forward. For more information, see the
configuration)” section on page 2-415
.
Use the
permit
and
deny
access-list configuration commands to forward and to drop ARP packets based
on the specified matching criteria.
When the ARP ACL is defined, you can apply it to a VLAN by using the
ip arp inspection filter vlan
global configuration command. ARP packets containing only IP-to-MAC address bindings are compared
to the ACL. All other types of packets are bridged in the ingress VLAN without validation. If the ACL
permits a packet, the switch forwards it. If the ACL denies a packet because of an explicit deny
statement, the switch drops the packet. If the ACL denies a packet because of an implicit deny statement,
the switch compares the packet to the list of DHCP bindings (unless the ACL is
static
, which means that
packets are not compared to the bindings).
acl-name
Name of the ACL.
Release
Modification
12.2(20)SE
This command was introduced.
