UMN:CLI
User Manual
V5824G
190
After opening
ARP Access List Configuration
mode, the prompt changes from
SWITCH(config)# to SWITCH(config-arp-acl[
NAME
])#. After opening
ARP ACL
Configuration
mode, a range of IP addresses can be configured to apply ARP inspection.
By default, ARP Access List discards the ARP packets of all IP addresses and MAC
addresses.
To configure the range of IP address to deny ARP packets, use the following command.
Command
Mode
Description
deny ip any mac
{
any
|
host
MACADDR
}
ARP-ACL
Discards all ARP packets of all IP addresses with all
MAC addresses which have not learned before on ARP
inspection table or a specific MAC address
any: ignores sender IP/MAC address
host: sender host
MACADDR: sender MAC address
deny ip host
A.B.C.D
mac
{
any
|
host
MACADDR
}
Discards ARP packets from a specific host.
MACADDR: MAC address
deny ip range
A.B.C.D A.B.C.D
mac any
Discards ARP packets of a given range of IP
addresses.
A.B.C.D: start/end IP address of sender
deny ip
A.B.C.D/A
mac
{
any
|
host
MACADDR
}
Discards ARP packets of a sender IP network
addresses.
A.B.C.D/A: sender IP network address
To delete the configured range of IP address for discarding ARP packets, use the
following command.
Command
Mode
Description
no deny ip any mac
{
any
|
host
MACADDR
}
ARP-ACL
Deletes a configured range of IP address to discard
ARP packets.
any: ignores sender MAC address
host: sender host
MACADDR: sender MAC address
A.B.C.D: start/end IP address of sender
A.B.C.D/A: sender IP network address
no deny ip host
A.B.C.D
mac
{
any
|
host
MACADDR
}
no deny ip range
A.B.C.D
A.B.C.D
mac any
no deny ip
A.B.C.D/A
mac
{
any
|
host
MACADDR
}
i
