(
Optional) To prevent the firewall from responding to ARP requests for
a specific address, enable
Negate for that entry.
Configure more specific negate entries, such as individual /32 addresses, before
broader range entries to ensure correct longest-prefix-match behavior.
Select
OK and then
Commit.