@description "MSK-IX inbound filter for ARP and else"
#first stage
#select arp to class-id 2
entry arp-filter-stage-1-1 {
        if {
                ethernet-type 0x806;
        }
        then {
                class-id 2
        }
        else {
        permit ;
        }
}
#select our arp
entry arp-filter-stage-2-1 {
        if {
                class-id 2;
                arp-target-address 195.208.209.140/32;
        }
        then {
        permit
        }
        else {
        deny;
        }
}