Dasan V8102 - Page 272

UMN:CLI User Manual
V8102
272
To configure the range of IP address to deny ARP packets, use the following command.
Command
Mode
Description
deny ip any mac {any | host
MACADDR}
ARP-ACL
Discards all ARP packets of all IP addresses with all
MAC addresses which have not learned before on ARP
inspection table or a specific MAC address
any: ignores sender IP/MAC address
host: sender host
MACADDR: sender MAC address
deny ip host A.B.C.D mac {any |
host MACADDR}
Discards ARP packets from a specific host.
MACADDR: MAC address
deny ip range A.B.C.D A.B.C.D
mac any
Discards ARP packets of a given range of IP address-
es.
A.B.C.D: start/end IP address of sender
deny ip A.B.C.D/A mac {any |
host MACADDR}
Discards ARP packets of a sender IP network address-
es.
A.B.C.D/A: sender IP network address
deny ip {any | host A.B.C.D |
A.B.C.D/A} mac pattern PAT-
TERN offset <0-5>
Discards ARP packets according to IP address and
MAC address pattern.
any: ignores sender IP address
A.B.C.D: sender IP address of host
A.B.C.D/A: sender IP network address
PATTERN: MAC address pattern (e.g. 10, 10:11, ~
10:10:11:20:20)
offset: character location within sender MAC address
pattern
To delete the configured range of IP address for discarding ARP packets, use the follow-
ing command.
Command
Mode
Description
no deny ip any mac {any | host
MACADDR}
ARP-ACL
Deletes a configured range of IP address to discard
ARP packets.
any: ignores sender MAC address
host: sender host
MACADDR: sender MAC address
A.B.C.D: start/end IP address of sender
A.B.C.D/A: sender IP network address
PATTERN: MAC address pattern (e.g. 10, 10:11, ~
10:10:11:20:20)
offset: character location within sender MAC address
pattern
no deny ip host A.B.C.D mac
{any | host MACADDR}
no deny ip range A.B.C.D
A.B.C.D mac any
no deny ip A.B.C.D/A mac {any |
host MACADDR}
no deny ip {any | host A.B.C.D |
A.B.C.D/A} mac pattern PAT-
TERN offset <0-5>