Chapter 10
| Access Control Lists
ARP ACLs
– 337 –
Command Usage
◆
When you create a new ACL or enter configuration mode for an existing
ACL, use the
permit
or
deny
command to add new rules to the bottom of
the list. To create an ACL, you must add at least one rule to the list.
◆
To remove a rule, use the
no permit
or
no deny
command followed by the
exact text of a previously configured rule.
◆
An ACL can contain up to 128 rules.
Example
Console(config)#access-list arp factory
Console(config-arp-acl)#
Related Commands
permit, deny (337)
show access-list arp (338)
permit, deny
(ARP ACL
)
This command adds a rule to an ARP ACL. The rule filters packets matching a
specified source or destination address in ARP messages. Use the
no
form to
remove a rule.
Syntax
[
no
] {
permit
|
deny
}
ip
{
any
|
host
source-ip
|
source-ip ip-address-bitmask
}
{
any
|
host
destination-ip | destination-ip ip-address-bitmask
}
mac
{
any
|
host
source-mac
|
source-mac mac-address-bitmask
}
[
any
|
host
destination-mac
|
destination-mac mac-address-bitmask
]
[
log
]
This form indicates either request or response packets.
[
no
] {
permit
|
deny
}
request
ip
{
any
|
host
source-ip
|
source-ip ip-address-bitmask
}
{
any
|
host
destination-ip | destination-ip ip-address-bitmask
}
mac
{
any
|
host
source-mac
|
source-mac mac-address-bitmask
}
[
any
|
host
destination-mac
|
destination-mac mac-address-bitmask
]
[
log
]
[
no
] {
permit
|
deny
}
response
ip
{
any
|
host
source-ip
|
source-ip ip-address-bitmask
}
{
any
|
host
destination-ip | destination-ip ip-address-bitmask
}
mac
{
any
|
host
source-mac
|
source-mac mac-address-bitmask
}
[
any
|
host
destination-mac
|
destination-mac mac-address-bitmask
]
[
log
]
source-ip
– Source IP address.
destination-ip
– Destination IP address with bitmask.
