Specifications

2-166
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0XO(15.1(1)XO)
OL_28738-01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
deny
deny
To deny an ARP packet based on matches again st the DHCP bindings, use the deny command. To
remove the specified ACEs from the access list, use the no form of this command.
deny {[request] ip {any | host sender-ip | sender-ip sende r-ip-mask} mac {any | host sender-mac
| sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
no deny {[request] ip {any | host sender-ip | sender-ip sender-ip -mask} mac {any | host
sender-mac | sender-mac sender-mac- mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
Syntax Description
Defaults A t the end of the ARP access list, there is an implicit deny ip any mac any command.
Command Modes arp-nacl c onfigur ation mo de
request (Optional) Requests a match for the ARP request. When re que st is
not specified, matching is performed against all ARP packets.
ip Specifies the sender IP address.
any Specifies that any IP or MAC address will be accepted.
host sender-ip Specifies that only a specific sender IP address will be accepted.
sender-ip sender-ip-mask Specifies that a specific range of sender IP addresses will be
accepted.
mac Specifies the sender MAC address.
host sender-mac Specifies that only a specific sender MAC address w ill be accepted.
sender-mac sender-mac-mask Specifies that a specific range of sender MAC addresses will be
accepted.
response Specifies a match f or the ARP responses.
ip Specifies the IP address values fo r the ARP responses.
host target-ip (Optional) Specifies that only a specific target IP address will be
accepted.
target-ip target-ip-mask (Optional) Specifies that a specific range of target IP addresses will
be accepted.
mac Specifies the MAC address va lues for the ARP responses.
host target-mac (Optional) Specifies that only a specific target MAC address will be
accepted.
target-mac target-mac-mask (Optional) Specifies that a specific range of target MAC addresses
will be accepted.
log ( Optional) Logs a packet when it matches the access control entry
(ACE).