ECS3510-26P_Management Guide R02

C HAPTER 25 | Access Control Lists
ARP ACLs
– 725 –
destination-mac – Destination MAC address range with bitmask.
mac-address-
bitmask
16
– Bitmask for MAC address (in hexadecimal
format).
log - Logs a packet when it matches the access control entry.
DEFAULT SETTING
None
COMMAND MODE
ARP ACL
COMMAND USAGE
New rules are added to the end of the list.
EXAMPLE
This rule permits packets from any source IP and MAC address to the
destination subnet address 192.168.0.0.
Console(config-arp-acl)#$permit response ip any 192.168.0.0 255.255.0.0 mac
any any
Console(config-mac-acl)#
RELATED COMMANDS
access-list arp (723)
show arp access-list This command displays the rules for configured ARP ACLs.
SYNTAX
show arp access-list [acl-name]
acl-name – Name of the ACL. (Maximum length: 16 characters)
COMMAND MODE
Privileged Exec
EXAMPLE
Console#show arp access-list
ARP access-list factory:
permit response ip any 192.168.0.0 255.255.0.0 mac any any
Console#
RELATED COMMANDS
permit, deny (724)