Cisco Nexus 7000 Series Security Command Reference - Cisco Nexus 7000 Series Command Reference Manual

deny (ARP)
host target-IP
target-IP target-IP-mask
host target-MAC
target-MAC target-MAC-mask
Command Default
None
Command Modes
ARP ACL configuration
Command History
Release
4.0(1)
Usage Guidelines
A newly created ARP ACL contains no rules.

Cisco Nexus 7000 Series Security Command Reference

226
(Optional) Specifies that the rule matches ARP
packets only when the target IP address in the packet
matches the value of the target-IP argument. You can
specify host target-IP only when you use the
response keyword. Valid values for the target-IP
argument are IPv4 addresses in dotted-decimal format.
(Optional) IPv4 address and mask for the set of IPv4
addresses that the target IP address in the packet can
match. You can specify target-IP target-IP-mask only
when you use the response keyword. The target-IP
and target-IP-mask argument must be given in
dotted-decimal format. Specifying 255.255.255.255
as the target-IP-mask argument is the equivalent of
using the host keyword.
(Optional) Specifies that the rule matches ARP
packets only when the target MAC address in the
packet matches the value of the target-MAC argument.
You can specify host target-MAC only when you use
the response keyword. Valid values for the
target-MAC argument are MAC addresses in
dotted-hexadecimal format.
(Optional) MAC address and mask for the set of MAC
addresses that the target MAC address in the packet
can match. You can specify target-MAC
target-MAC-mask only when you use the response
keyword. The target-MAC and target-MAC-mask
argument must be given in dotted-hexadecimal
format. Specifying ffff.ffff.ffff as the
target-MAC-mask argument is the equivalent of using
the host keyword.
Modification
This command was introduced.
D Commands