2-290
Catalyst 3560 Switch Command Reference
78-16405-05
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands
permit (ARP access-list configuration)
permit (ARP access-list configuration)
Use the permit Address Resolution Protocol (ARP) access-list configuration command to permit an
ARP packet based on matches against the Dynamic Host Configuration Protocol (DHCP) bindings. Use
the no form of this command to remove the specified access control entry (ACE) from the access control
list.
permit {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host sender-mac
| sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip sender-ip-mask}
[{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac | sender-mac
sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
no permit {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host
sender-mac | sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask} [{any | host target-mac |
target-mac target-mac-mask}]} [log]
This command is available only if your switch is running the IP services image, formerly known as the
enhanced multilayer image (EMI).
Syntax Description
Defaults There are no default settings.
request (Optional) Requests a match for the ARP request. When request is not
specified, matching is performed against all ARP packets.
ip Specify the sender IP address.
any Accept any IP or MAC address.
host sender-ip Accept the specified sender IP address.
sender-ip
sender-ip-mask
Accept the specified range of sender IP addresses.
mac Specify the sender MAC address.
host sender-mac Accept the specified sender MAC address.
sender-mac
sender-mac-mask
Accept the specified range of sender MAC addresses.
response ip Define the IP address values for the ARP responses.
host target-ip (Optional) Accept the specified target IP address.
target-ip target-ip-mask (Optional) Accept the specified range of target IP addresses.
mac Specify the MAC address values for the ARP responses.
host target-mac (Optional) Accept the specified target MAC address.
target-mac
target-mac-mask
(Optional) Accept the specified range of target MAC addresses.
log (Optional) Log a packet when it matches the ACE. Matches are logged if
you also configure the matchlog keyword in the ip arp inspection vlan
logging global configuration command.