deny
Command History
Release
12.1(19)EW
Usage Guidelines
Deny clauses can be added to forward or drop ARP packets based on some matching criteria.
Examples
The following example shows a host with a MAC address of 0000.0000.abcd and an IP address of
1.1.1.1. The following example shows howto deny both requests and responses from this host:
Switch(config)# arp access-list static-hosts
Switch(config-arp-nacl)# deny ip host 1.1.1.1 mac host 0000.0000.abcd
Switch(config-arp-nacl)# end
Switch# show arp access-list
ARP access list static-hosts
Switch#
Related Commands
Command
arp access-list
ip arp inspection filter vlan
permit
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
2-194
Modification
This command was introduced on the Catalyst 4500 series switch.
deny ip host 1.1.1.1 mac host 0000.0000.abcd
Chapter 2
Cisco IOS Commands for the Catalyst 4500 Series Switches
Description
Defines an ARP access list or adds clauses at the end of a
predefined list.
Permits ARPs from hosts that are configured for static IP
when DAI is enabled and to define an ARP access list and
applies it to a VLAN.
Permits an ARP packet based on matches against the DHCP
bindings.
OL-30934-01