OcNOS-SP : System Management Guide : System Management Command Reference : Access Control List Commands : arp access-list request
arp access-list request
Use this command to configure ARP access control entry in an ARP access control list (ACL).
This command determines whether to accept or drop a packet based on the configured match criteria.
Use the no form of this command to remove an ACL specification.
Note: Configuring the same filter again with a change of sequence number or change of action will result in updating the sequence number or filter action.
Command Syntax
(<1-268435453>|)(deny|permit)(request |) ip (A.B.C.D/M|A.B.C.D A.B.C.D|host A.B.C.D|any) mac (any | ((XX-XX-XX-XX-XX-XX|XX:XX:XX:XX:XX:XX|XXXX.XXXX.XXXX) (XX-XX-XX-XX-XX-XX|XX:XX:XX:XX:XX:XX|XXXX.XXXX.XXXX)) | (host (XX-XX-XX-XX-XX-XX|XX:XX:XX:XX:XX:XX|XXXX.XXXX.XXXX))) (vlan <1-4094>|) (inner-vlan <1-4094>|)
no (<1-268435453>|)(deny|permit)(request |) ip (A.B.C.D/M|A.B.C.D A.B.C.D|host A.B.C.D|any) mac (any | ((XX-XX-XX-XX-XX-XX|XX:XX:XX:XX:XX:XX|XXXX.XXXX.XXXX) (XX-XX-XX-XX-XX-XX|XX:XX:XX:XX:XX:XX|XXXX.XXXX.XXXX)) | (host (XX-XX-XX-XX-XX-XX|XX:XX:XX:XX:XX:XX|XXXX.XXXX.XXXX))) (vlan <1-4094>|) (inner-vlan <1-4094>|)
Parameters
<1-268435453>
ARP ACL sequence number.
deny
Drop the packet.
permit
Accept the packet.
request
ARP request.
ip
Internet Protocol (IP).
A.B.C.D/M
Source IP prefix and length.
A.B.C.D A.B.C.D
 
Source IP address and mask.
host A.B.C.D
A single source host IP address.
any
Match any source IP address.
mac
MAC address configuration.
any
Match any source mac address.
XX-XX-XX-XX-XX-XX
 
Source MAC address (Option 1).
XX:XX:XX:XX:XX:XX
 
Source MAC address (Option 2).
XXXX.XXXX.XXXX
Source MAC address (Option 3).
XX-XX-XX-XX-XX-XX
 
Source wildcard (Option 1).
XX:XX:XX:XX:XX:XX
 
Source wildcard (Option 2).
XXXX.XXXX.XXXX
 
Source wildcard (Option 3).
host (XX-XX-XX-XX-XX-XX)
 
A single source host MAC address.
vlan <1-4094>
VLAN identifier.
inner-vlan <1-4094>
 
Inner VLAN identifier.
Command Mode
ARP access-list mode
Applicability
This command was introduced in OcNOS version 3.0.
Examples
#configure terminal
(config)#arp access-list arp1
(config-arp-acl)#10 permit request ip 1.1.1.0/24 mac 0000.0000.0001 FFFF.FFFF.FFF0
(config-arp-acl)#no 10
Last modified date: 10/19/2023