[Back] Drag the correct grey box into the orange box.
(config)# policy-map mypol
(config-pmap-c)# drop
(config)# aaa authorization network default group radius
(config)# ip arp access-list 100
defines that all matched traffic should be dropped