Cisco Catalyst 4500 Series Command Reference Guide

2-184
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
OL-27596 -01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
deny
deny
To deny an ARP packet based on matches against the DHCP bindings, use the deny command. To
remove the specified ACEs from the access list, use the no form of this command.
deny {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host sender-mac
| sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
no deny {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host
sender-mac | sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask} [{any | host target-mac
| target-mac target-mac-mask}]} [log]
Syntax Description
Defaults At the end of the ARP access list, there is an implicit deny ip any mac any command.
Command Modes arp-nacl configuration mode
request (Optional) Requests a match for the ARP request. When request is
not specified, matching is performed against all ARP packets.
ip Specifies the sender IP address.
any Specifies that any IP or MAC address will be accepted.
host sender-ip Specifies that only a specific sender IP address will be accepted.
sender-ip sender-ip-mask Specifies that a specific range of sender IP addresses will be
accepted.
mac Specifies the sender MAC address.
host sender-mac Specifies that only a specific sender MAC address will be accepted.
sender-mac sender-mac-mask Specifies that a specific range of sender MAC addresses will be
accepted.
response Specifies a match for the ARP responses.
ip Specifies the IP address values for the ARP responses.
host target-ip (Optional) Specifies that only a specific target IP address will be
accepted.
target-ip target-ip-mask (Optional) Specifies that a specific range of target IP addresses will
be accepted.
mac Specifies the MAC address values for the ARP responses.
host target-mac (Optional) Specifies that only a specific target MAC address will be
accepted.
target-mac target-mac-mask (Optional) Specifies that a specific range of target MAC addresses
will be accepted.
log (Optional) Logs a packet when it matches the access control entry
(ACE).

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E