Cisco Nexus 7000 Series - Page 252

(Optional) Specifies that the rule matches ARP
packets only when the target IP address in the packet
matches the value of the target-IP argument. You can
specify host target-IP only when you use the
response keyword. Valid values for the target-IP
argument are IPv4 addresses in dotted-decimal format.
host target-IP
(Optional) IPv4 address and mask for the set of IPv4
addresses that the target IP address in the packet can
match. You can specify target-IP target-IP-mask only
when you use the response keyword. The target-IP
and target-IP-mask argument must be given in
dotted-decimal format. Specifying 255.255.255.255
as the target-IP-mask argument is the equivalent of
using the host keyword.
target-IP target-IP-mask
(Optional) Specifies that the rule matches ARP
packets only when the target MAC address in the
packet matches the value of the target-MAC argument.
You can specify host target-MAC only when you use
the response keyword. Valid values for the
target-MAC argument are MAC addresses in
dotted-hexadecimal format.
host target-MAC
(Optional) MAC address and mask for the set of MAC
addresses that the target MAC address in the packet
can match. You can specify target-MAC
target-MAC-mask only when you use the response
keyword. The target-MAC and target-MAC-mask
argument must be given in dotted-hexadecimal
format. Specifying ffff.ffff.ffff as the
target-MAC-mask argument is the equivalent of using
the host keyword.
target-MAC target-MAC-mask
Command Default
None
Command Modes
ARP ACL configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Usage Guidelines
A newly created ARP ACL contains no rules.
Cisco Nexus 7000 Series Security Command Reference
226
D Commands
deny (ARP)