UMN:CLI
User Manual
V8102
272
To configure the range of IP address to deny ARP packets, use the following command.
Command
Mode
Description
deny ip any mac
{
any
|
host
MACADDR
}
ARP-ACL
Discards all ARP packets of all IP addresses with all
MAC addresses which have not learned before on ARP
inspection table or a specific MAC address
any: ignores sender IP/MAC address
host: sender host
MACADDR: sender MAC address
deny ip host A.B.C.D
mac
{
any
|
host
MACADDR
}
Discards ARP packets from a specific host.
MACADDR: MAC address
deny ip range A.B.C.D A.B.C.D
mac any
Discards ARP packets of a given range of IP address-
es.
A.B.C.D: start/end IP address of sender
deny ip
A.B.C.D/A
mac
{
any
|
host
MACADDR
}
Discards ARP packets of a sender IP network address-
es.
A.B.C.D/A: sender IP network address
deny ip
{
any
|
host A.B.C.D
|
A.B.C.D/A
}
mac pattern PAT-
TERN
offset
<0-5>
Discards ARP packets according to IP address and
MAC address pattern.
any: ignores sender IP address
A.B.C.D: sender IP address of host
A.B.C.D/A: sender IP network address
PATTERN: MAC address pattern (e.g. 10, 10:11,
~
10:10:11:20:20)
offset: character location within sender MAC address
pattern
To delete the configured range of IP address for discarding ARP packets, use the follow-
ing command.
Command
Mode
Description
no deny ip any mac
{
any
|
host
MACADDR
}
ARP-ACL
Deletes a configured range of IP address to discard
ARP packets.
any: ignores sender MAC address
host: sender host
MACADDR: sender MAC address
A.B.C.D: start/end IP address of sender
A.B.C.D/A: sender IP network address
PATTERN: MAC address pattern (e.g. 10, 10:11,
~
10:10:11:20:20)
offset: character location within sender MAC address
pattern
no deny ip host A.B.C.D
mac
{
any
|
host
MACADDR
}
no deny ip range
A.B.C.D
A.B.C.D
mac any
no deny ip
A.B.C.D/A
mac
{
any
|
host
MACADDR
}
no deny ip
{
any
|
host A.B.C.D
|
A.B.C.D/A
}
mac pattern PAT-
TERN offset
<0-5>