D-Link DGS-1510 Series Reference Manual page 230

Gigabit ethernet smartpro switch
Hide thumbs Also See for DGS-1510 Series:
Table of Contents
DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
Use the no form of this command to reset some of the logging criteria to their defaults. If not specified,
all the logging types are reset to log on when the ARP packets are denied.
Example
This example shows how to configure an ARP inspection on VLAN 1 to add packets to a log that
matches the ACLs.
Switch# configure terminal
Switch(config)# ip arp inspection vlan 1 logging acl-match all
Switch(config)#
26-11
permit | deny (arp access-list)
This command is used to define the ARP permit entry. Use the deny command to define the ARP
deny entry. Use the no form of this command to remove an entry
{permit | deny} ip {any | host SENDER-IP | SENDER-IP SENDER-IP-MASK} mac {any | host
SENDER-MAC | SENDER-MAC SENDER-MAC-MASK}
no {permit | deny} ip {any | host SENDER-IP | SENDER-IP SENDER-IP-MASK} mac {any |
host SENDER-MAC | SENDER-MAC SENDER-MAC-MASK}
Parameters
ip any
ip host SENDER-IP
SENDER-IP SENDER-IP-
MASK
mac any
mac host SENDER-MAC
SENDER-MAC SENDER-
MAC-MASK
Default
None.
Command Mode
ARP Access-list Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
Using the permit any option will permit the rest of the packets that do not match any previous rule.
Example
This example shows how to configure an ARP access-list with two permit entries.
Specifies to match any source IP address.
Specifies to match a single source IP address.
Specifies to match a group of source IP addresses by using a
bitmap mask. The bit corresponding to bit value 1 will be checked.
The input format is the same as IP address.
Specifies to match any source MAC address.
Specifies to match a single source MAC address.
Specifies to match a group of source MAC addresses by using a
bitmap mask. The bit corresponding to bit value 1 will be checked.
The input format is the same as MAC address.
227

Hide quick links:

Table of Contents
loading

Table of Contents