Deny - Cisco 4500M Command Reference Manual

deny

deny
To deny an ARP packet based on matches against the DHCP bindings, use the deny command. Use the
no form of the command to remove specified ACEs from the access list.
Syntax Description
request
ip
any
host sender-ip
sender-ip sender-ip-mask
mac
host sender-mac
sender-mac sender-mac-mask
response
ip
host target-ip
target-ip target-ip-mask
mac
host target-mac
target-mac target-mac-mask
log
Defaults
At the end of the ARP access list, there is an implicit deny ip any mac any command.
Command Modes
arp-nacl configuration
Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW
2-78
deny {[request] ip {any | host sender-ip | sender-ip sender-ip-mask } mac {any | host sender-mac
| sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask } [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask } [{any | host target-mac | target-mac target-mac-mask}]} [log]
no deny {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host
sender-mac | sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask } [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask } [{any | host target-mac | target-mac target-mac-mask}]} [log]
Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches
(Optional) Requests a match for the ARP request. When request is
not specified, matching is performed against all ARP packets.
Specifies the sender IP address.
Specifies that any IP or MAC address will be accepted.
Specifies that only a specific sender IP address will be accepted.
Specifies that a specific range of sender IP addresses will be
accepted.
Specifies the sender MAC address.
Specifies that only a specific sender MAC address will be accepted.
Specifies that a specific range of sender MAC addresses will be
accepted.
Specifies a match for the ARP responses.
Specifies the IP address values for the ARP responses.
(Optional) Specifies that only a specific target IP address will be
accepted.
(Optional) Specifies that a specific range of target IP addresses will
be accepted.
Specifies the MAC address values for the ARP responses.
(Optional) Specifies that only a specific target MAC address will be
accepted.
(Optional) Specifies that a specific range of target MAC addresses
will be accepted.
(Optional) Logs a packet when it matches the access control entry
(ACE).
78-16201-01