Я вообще не понимаю как ваще работает данный коммутатор - нафига ему АЦЛ если фигню пропускает по арпу - честно достал - ухожу на каталист .

23:42:34.934098 3c:07:54:4a:eb:9e > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.113.81 tell 172.16.9.3, length 28
23:42:34.936225 10:9a:dd:5a:aa:cd > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.154.145 tell 172.16.9.4, length 46
23:42:35.963318 10:9a:dd:5a:aa:cd > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.154.145 tell 172.16.9.4, length 46
23:42:35.965959 3c:07:54:4a:eb:9e > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.113.81 tell 172.16.9.3, length 28

АЦЛ вот - какого он пропускает фигню?

create cpu access_profile profile_id 1 packet_content_mask offset_0-15 0x0 0x0 0x0 0xFFFFFFFF offset_16-31 0xFFFFFFFF 0xFFFF0000 0x0 0xFFFFFF00 offset_32-47 0x0 0xFFFF 0xF0000000 0x0
config cpu access_profile profile_id 1 add access_id 1 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x10000 0x0 0xAC100100 offset_32-47 0x0 0xAC10 0x0 0x0 port 1 permit
config cpu access_profile profile_id 1 add access_id 2 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x10000 0x0 0xAC100200 offset_32-47 0x0 0xAC10 0x0 0x0 port 2 permit
config cpu access_profile profile_id 1 add access_id 3 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x10000 0x0 0xAC100300 offset_32-47 0x0 0xAC10 0x0 0x0 port 3 permit
config cpu access_profile profile_id 1 add access_id 4 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x10000 0x0 0xAC100400 offset_32-47 0x0 0xAC10 0x0 0x0 port 4 permit
config cpu access_profile profile_id 1 add access_id 5 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x10000 0x0 0xAC100500 offset_32-47 0x0 0xAC10 0x0 0x0 port 5 permit
config cpu access_profile profile_id 1 add access_id 6 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x10000 0x0 0xAC100600 offset_32-47 0x0 0xAC10 0x0 0x0 port 6 permit
config cpu access_profile profile_id 1 add access_id 7 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x10000 0x0 0xAC100700 offset_32-47 0x0 0xAC10 0x0 0x0 port 7 permit
config cpu access_profile profile_id 1 add access_id 8 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x10000 0x0 0xAC100800 offset_32-47 0x0 0xAC10 0x0 0x0 port 8 permit
config cpu access_profile profile_id 1 add access_id 9 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x10000 0x0 0xAC100900 offset_32-47 0x0 0xAC10 0x0 0x0 port 9 permit
config cpu access_profile profile_id 1 add access_id 10 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x10000 0x0 0xAC100A00 offset_32-47 0x0 0xAC10 0x0 0x0 port 10 permit
config cpu access_profile profile_id 1 add access_id 11 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x20000 0x0 0xAC100100 offset_32-47 0x0 0xAC10 0x0 0x0 port 1 permit
config cpu access_profile profile_id 1 add access_id 12 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x20000 0x0 0xAC100200 offset_32-47 0x0 0xAC10 0x0 0x0 port 2 permit
config cpu access_profile profile_id 1 add access_id 13 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x20000 0x0 0xAC100300 offset_32-47 0x0 0xAC10 0x0 0x0 port 3 permit
config cpu access_profile profile_id 1 add access_id 14 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x20000 0x0 0xAC100400 offset_32-47 0x0 0xAC10 0x0 0x0 port 4 permit
config cpu access_profile profile_id 1 add access_id 15 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x20000 0x0 0xAC100500 offset_32-47 0x0 0xAC10 0x0 0x0 port 5 permit
config cpu access_profile profile_id 1 add access_id 16 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x20000 0x0 0xAC100600 offset_32-47 0x0 0xAC10 0x0 0x0 port 6 permit
config cpu access_profile profile_id 1 add access_id 17 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x20000 0x0 0xAC100700 offset_32-47 0x0 0xAC10 0x0 0x0 port 7 permit
config cpu access_profile profile_id 1 add access_id 18 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x20000 0x0 0xAC100800 offset_32-47 0x0 0xAC10 0x0 0x0 port 8 permit
config cpu access_profile profile_id 1 add access_id 19 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x20000 0x0 0xAC100900 offset_32-47 0x0 0xAC10 0x0 0x0 port 9 permit
config cpu access_profile profile_id 1 add access_id 20 packet_content offset_0-15 0x0 0x0 0x0 0x8060001 offset_16-31 0x8000604 0x20000 0x0 0xAC100A00 offset_32-47 0x0 0xAC10 0x0 0x0 port 10 permit
create cpu access_profile profile_id 2 packet_content_mask offset_0-15 0x0 0x0 0x0 0xFFFF0000
config cpu access_profile profile_id 2 add access_id 1 packet_content offset_0-15 0x0 0x0 0x0 0x8060000 port 1-10 deny
config cpu access_profile profile_id 2 add access_id 2 packet_content offset_0-15 0x0 0x0 0x0 0x81000000 port 1 deny
config cpu access_profile profile_id 2 add access_id 3 packet_content offset_0-15 0x0 0x0 0x0 0x80350000 port 1 deny
config cpu access_profile profile_id 2 add access_id 4 packet_content offset_0-15 0x0 0x0 0x0 0x88630000 port 1-10 deny
config cpu access_profile profile_id 2 add access_id 5 packet_content offset_0-15 0x0 0x0 0x0 0x88640000 port 1-10 deny
create cpu access_profile profile_id 3 ip source_ip_mask 255.255.255.255 destination_ip_mask 255.255.255.255 udp src_port_mask 0xFFFF dst_port_mask 0xFFFF
config cpu access_profile profile_id 3 add access_id 1 ip source_ip 0.0.0.0 destination_ip 255.255.255.255 udp src_port 68 dst_port 67 port 1,3-10 permit
create cpu access_profile profile_id 4 ip source_ip_mask 255.255.255.0
config cpu access_profile profile_id 4 add access_id 1 ip source_ip 172.16.1.0 port 1 permit
config cpu access_profile profile_id 4 add access_id 2 ip source_ip 172.16.3.0 port 3 permit
config cpu access_profile profile_id 4 add access_id 3 ip source_ip 172.16.4.0 port 4 permit
config cpu access_profile profile_id 4 add access_id 4 ip source_ip 172.16.5.0 port 5 permit
config cpu access_profile profile_id 4 add access_id 5 ip source_ip 172.16.6.0 port 6 permit
config cpu access_profile profile_id 4 add access_id 6 ip source_ip 172.16.7.0 port 7 permit
config cpu access_profile profile_id 4 add access_id 7 ip source_ip 172.16.8.0 port 8 permit
config cpu access_profile profile_id 4 add access_id 8 ip source_ip 172.16.9.0 port 9 permit
config cpu access_profile profile_id 4 add access_id 9 ip source_ip 172.16.10.0 port 10 permit
create cpu access_profile profile_id 5 packet_content_mask offset_0-15 0x0 0x0 0x0 0xFFFF0000
config cpu access_profile profile_id 5 add access_id 1 packet_content offset_0-15 0x0 0x0 0x0 0x8000000 port 1,3-10 deny
config cpu access_profile profile_id 5 add access_id 2 packet_content offset_0-15 0x0 0x0 0x0 0x86DD0000 port 2 deny

Добрый день.

1. Нужно указывать используемую версию прошивки.
2. ACL-и лучше комментарии прикладывать, чтобы сразу понять их смысловую нагрузку.
3. Эти ARP пакеты - транзитный трафик в клиентском VLAN-е?

_________________
С уважением,
Бигаров Руслан.

Это ACL на доступ пакета к CPU коммутатора. Вы уверены, что это именно то, чего Вы хотите?