Specifies that the rules matches ARP packets only
when the sender IP address in the packet matches the
value of the sender-IP argument. Valid values for the
sender-IP argument are IPv4 addresses in
dotted-decimal format.
host sender-IP
IPv4 address and mask for the set of IPv4 addresses
that the sender IP address in the packet can match.
The sender-IP and sender-IP-mask argument must
be in dotted-decimal format. Specifying
255.255.255.255 as the sender-IP-mask argument is
the equivalent of using the host keyword.
sender-IP sender-IP-mask
Introduces the MAC address portion of the rule.mac
Specifies that the rule matches ARP packets only
when the sender MAC address in the packet matches
the value of the sender-MAC argument. Valid values
for the sender-MAC argument are MAC addresses in
dotted-hexadecimal format.
host sender-MAC
MAC address and mask for the set of MAC addresses
that the sender MAC address in the packet can match.
The sender-MAC and sender-MAC-mask argument
must be in dotted-hexadecimal format. Specifying
ffff.ffff.ffff as the sender-MAC-mask argument is the
equivalent of using the host keyword.
sender-MAC sender-MAC-mask
(Optional) Specifies that the device logs ARP packets
that match the rule.
log
(Optional) Specifies that the rule applies only to
packets containing ARP request messages.
If you omit both the request and the
response keywords, the rule applies to all
ARP messages.
Note
request
(Optional) Specifies that the rule applies only to
packets containing ARP response messages.
If you omit both the request and the
response keywords, the rule applies to all
ARP messages.
Note
response
Specifies that the rule matches ARP packets only
when the target IP address in the packet matches the
value of the target-IP argument. You can specify host
target-IP only when you use the response keyword.
Valid values for the target-IP argument are IPv4
addresses in dotted-decimal format.
host target-IP
Cisco Nexus 7000 Series Security Command Reference
538
P Commands
permit (ARP)
To Next Page
Loading...
