Cisco WS-C3560E-24PD-E User Manual

2-70
Catalyst 3560 Switch Command Reference
78-16405-05
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands
deny (ARP access-list configuration)
deny (ARP access-list configuration)
Use the deny Address Resolution Protocol (ARP) access-list configuration command to deny an ARP
packet based on matches against the DHCP bindings. Use the no form of this command to remove the
specified access control entry (ACE) from the access list.
deny {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host sender-mac
| sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip sender-ip-mask}
[{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac | sender-mac
sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
no deny {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host
sender-mac | sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask} [{any
| host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
This command is available only if your switch is running the IP services image, formerly known as the
enhanced multilayer image (EMI).
Syntax Description
Defaults There are no default settings. However, at the end of the ARP access list, there is an implicit deny ip any
mac any command.
Command Modes ARP access-list configuration
request (Optional) Define a match for the ARP request. When request is not
specified, matching is performed against all ARP packets.
ip Specify the sender IP address.
any Deny any IP or MAC address.
host sender-ip Deny the specified sender IP address.
sender-ip sender-ip-mask Deny the specified range of sender IP addresses.
mac Deny the sender MAC address.
host sender-mac Deny a specific sender MAC address.
sender-mac
sender-mac-mask
Deny the specified range of sender MAC addresses.
response ip Define the IP address values for the ARP responses.
host target-ip Deny the specified target IP address.
target-ip target-ip-mask Deny the specified range of target IP addresses.
mac Deny the MAC address values for the ARP responses.
host target-mac Deny the specified target MAC address.
target-mac
target-mac-mask
Deny the specified range of target MAC addresses.
log (Optional) Log a packet when it matches the ACE.

Cisco WS-C3560E-24PD-E Specifications

General

Brand	Cisco
Model	WS-C3560E-24PD-E
Category	Switch
Language	English