2-508
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
OL-27596 -01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
permit
permit
To permit an ARP packet based on matches against the DHCP bindings, use the permit command. To
remove a specified ACE from an access list, use the no form of this command.
permit {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host sender-mac
| sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
no permit {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host
sender-mac | sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask} [{any | host target-mac
| target-mac target-mac-mask}]} [log]
Syntax Description
Defaults This command has no default settings.
Command Modes arp-nacl configuration mode
request (Optional) Requests a match for the ARP request. When request is not
specified, matching is performed against all ARP packets.
ip Specifies the sender IP address.
any Specifies that any IP or MAC address will be accepted.
host sender-ip Specifies that only a specific sender IP address will be accepted.
sender-ip
sender-ip-mask
Specifies that a specific range of sender IP addresses will be accepted.
mac Specifies the sender MAC address.
host sender-mac Specifies that only a specific sender MAC address will be accepted.
sender-mac
sender-mac-mask
Specifies that a specific range of sender MAC addresses will be accepted.
response Specifies a match for the ARP responses.
ip Specifies the IP address values for the ARP responses.
host target-ip (Optional) Specifies that only a specific target IP address will be accepted.
target-ip target-ip-mask (Optional) Specifies that a specific range of target IP addresses will be
accepted.
mac Specifies the MAC address values for the ARP responses.
host target-mac (Optional) Specifies that only a specific target MAC address will be
accepted.
target-mac
target-mac-mask
(Optional) Specifies that a specific range of target MAC addresses will be
accepted.
log (Optional) Logs a packet when it matches the access control entry (ACE).