ARP commands 1

arp check enable· 1

arp check log enable· 1

arp max-learning-num·· 2

arp max-learning-number 3

arp mode uni 4

arp multiport 5

arp static· 6

arp timer aging· 7

display arp· 8

display arp ip-address 10

display arp timer aging· 10

display arp vpn-instance· 11

reset arp· 11

Gratuitous ARP commands 13

arp ip-conflict log prompt 13

arp send-gratuitous-arp· 13

gratuitous-arp-learning enable· 14

gratuitous-arp-sending enable· 15

Proxy ARP commands 16

display local-proxy-arp· 16

display proxy-arp· 16

local-proxy-arp enable· 17

proxy-arp enable· 18

ARP snooping commands 20

arp snooping enable· 20

display arp snooping· 20

reset arp snooping· 21

ARP fast-reply commands 23

arp fast-reply enable· 23

 

arp check enable

Use arp check enable to enable dynamic ARP entry check.

Use undo arp check enable to disable dynamic ARP entry check.

Syntax

arp check enable

undo arp check enable

Default

Dynamic ARP entry check is enabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Dynamic ARP entry check disables a device from supporting dynamic ARP entries with multicast MAC addresses. The device cannot learn dynamic ARP entries containing multicast MAC addresses. You cannot manually add static ARP entries that contain multicast MAC addresses.

When this function is disabled, ARP entries containing multicast MAC addresses are supported. The device can learn dynamic ARP entries containing multicast MAC addresses obtained from the ARP packets sourced from a unicast MAC address. You can also manually add static ARP entries containing multicast MAC addresses.

Examples

# Enable dynamic ARP entry check.

<Sysname> system-view

[Sysname] arp check enable

arp check log enable

Use arp check log enable to enable the ARP logging function.

Use undo arp check log enable to disable the ARP logging function.

Syntax

arp check log enable

undo arp check log enable

Default

ARP logging is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This function enables a device to log ARP events when ARP cannot resolve IP addresses correctly. The device can log the following ARP events:

·     On a proxy ARP-disabled interface, the target IP address of a received ARP packet is not one of the following IP addresses:

¡     The IP address of the receiving interface.

¡     The virtual IP address of the VRRP group.

¡     The public address after NAT.

·     The sender IP address of a received ARP reply conflicts with one of the following IP addresses:

¡     The IP address of the receiving interface.

¡     The virtual IP address of the VRRP group.

¡     The public address after NAT.

The device sends ARP log messages to the information center. You can use the info-center source command to specify the log output rules for the information center. For more information about information center, see Network Management and Monitoring Configuration Guide.

The device can generate a large amount of ARP logs. To conserve system resources, enable ARP logging only when you are troubleshooting or debugging ARP events.

Examples

# Enable ARP logging.

<Sysname> system-view

[Sysname] arp check log enable

arp max-learning-num

Use arp max-learning-num to set the maximum number of dynamic ARP entries that an interface can learn.

Use undo arp max-learning-num to restore the default.

Syntax

arp max-learning-num number

undo arp max-learning-num

Default

The maximum number of dynamic ARP entries that an interface can learn depends on the ARP table capacity set by using the switch-mode command. For information about the switch-mode command, see Fundamentals Command Reference.

Views

Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, VLAN interface view, Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view, S-channel interface view

Predefined user roles

network-admin

Parameters

number: Specifies the maximum number of dynamic ARP entries for an interface. The value range is 0 to N. The value for N depends on the ARP table capacity.

Usage guidelines

An interface can dynamically learn ARP entries. To prevent an interface from holding too many ARP entries, you can set the maximum number of dynamic ARP entries that the interface can learn. When the maximum number is reached, the interface stops learning ARP entries.

When the number argument is set to 0, the interface is disabled from learning dynamic ARP entries.

Examples

# Specify VLAN-interface 40 to learn a maximum of 500 dynamic ARP entries.

<Sysname> system-view

[Sysname] interface vlan-interface 40

[Sysname-Vlan-interface40] arp max-learning-num 500

# Specify FortyGigE 1/1/1 to learn a maximum of 1000 dynamic ARP entries.

<Sysname> system-view

[Sysname] interface FortyGigE 1/1/1

[Sysname-FortyGigE1/1/1] arp max-learning-num 1000

# Specify Layer 2 aggregate interface Bridge-Aggregation 1 to learn a maximum of 1000 dynamic ARP entries.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] arp max-learning-num 1000

# Specify Layer 3 aggregate interface Route-Aggregation 1 to learn a maximum of 1000 dynamic ARP entries.

<Sysname> system-view

[Sysname] interface route-aggregation 1

[Sysname-Route-Aggregation1] arp max-learning-num 1000

arp max-learning-number

Use arp max-learning-number to set the maximum number of dynamic ARP entries that a device can learn.

Use undo arp max-learning-number to restore the default.

Syntax

arp max-learning-number number slot slot-number

undo arp max-learning-number slot slot-number

Default

The maximum number of dynamic ARP entries that a device can learn depends on the ARP table capacity set by using the switch-mode command. For information about the switch-mode command, see Fundamentals Command Reference.

Views

System view

Predefined user roles

network-admin

Parameters

number: Specifies the maximum number of dynamic ARP entries for a device. The value range is 0 to N. The value for N depends on the ARP table capacity.

slot slot-number: Displays the ARP entries of an IRF member device. The slot-number argument specifies the ID of the IRF member device.

Usage guidelines

A device can dynamically learn ARP entries. To prevent a device from holding too many ARP entries, you can set the maximum number of dynamic ARP entries that the device can learn. When the maximum number is reached, the device stops learning ARP entries.

When the number argument is set to 0, the device is disabled from learning dynamic ARP entries.

Examples

# Set the IRF member device in slot 1 to learn a maximum of 64 dynamic ARP entries.

<Sysname> system-view

[Sysname] arp max-learning-number 64 slot 1

arp mode uni

Use arp mode uni to configure a port as a customer-side port.

Use undo arp mode to restore the default.

Syntax

arp mode uni

undo arp mode

Default

A port operates as a network-side port.

Views

VLAN interface view

Predefined user roles

network-admin

Usage guidelines

By default, the device associates an ARP entry with routing information when the device learns an ARP entry. The ARP entry provides the next hop information for routing. To save hardware resources, you can use this command to specify a port that connects to a user terminal as a customer-side port. The device will not associate the routing information with the learned ARP entries.

Examples

# Specify VLAN-interface 2 as a customer-side port.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] arp mode uni

arp multiport

Use arp multiport to configure a multiport ARP entry.

Use undo arp to remove an ARP entry.

Syntax

arp multiport ip-address mac-address vlan-id [ vpn-instance vpn-instance-name ]

undo arp ip-address [ vpn-instance-name ]

Default

No multiport ARP entries are configured.

Views

System view

Predefined user roles

network-admin

Parameters

ip-address: Specifies an IP address for the multiport ARP entry.

mac-address: Specifies a MAC address for the multiport ARP entry, in the format of H-H-H.

vlan-id: Specifies a VLAN for the multiport ARP entry, in the range of 1 to 4094.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance for the multiport ARP entry. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. The specified VPN instance must already exist. Without this option, the multiport ARP entry belongs to the public network.

Usage guidelines

The specified VLAN must already exist. If the VLAN or the corresponding VLAN interface is removed, the multiport ARP entry is also removed.

The specified IP address must reside on the same subnet as the VLAN interface of the specified VLAN. Otherwise, the multiport ARP entry does not take effect.

To use the multiport ARP entry, you must configure a multicast or multiport unicast MAC address entry to specify multiple output interfaces. The MAC address entry must have the same MAC address and VLAN ID as the multiport ARP entry.

Examples

# Configure a multiport ARP entry that comprises IP address 202.38.10.2 and MAC address 00e0-fc01-0000 in VLAN 10.

<Sysname> system-view

[Sysname] arp multiport 202.38.10.2 00e0-fc01-0000 10

Related commands

·     display arp multiport

·     reset arp multiport

arp static

Use arp static to configure a static ARP entry.

Use undo arp to remove an ARP entry.

Syntax

arp static ip-address mac-address [ vlan-id interface-type interface-number ] [ vpn-instance vpn-instance-name ]

undo arp ip-address [ vpn-instance-name ]

Default

No static ARP entries are configured.

Views

System view

Predefined user roles

network-admin

Parameters

ip-address: Specifies an IP address for the static ARP entry.

mac-address: Specifies a MAC address for the static ARP entry, in the format of H-H-H.

vlan-id: Specifies the ID of a VLAN to which the static ARP entry belongs. The value range is 1 to 4094. The VLAN and VLAN interface must already exist.

interface-type interface-number: Specifies an interface by its type and number. Make sure the interface belongs to the specified VLAN.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN for the static ARP entry. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. The VPN instance must already exist. To specify a static ARP entry on the public network, do not specify this option.

Usage guidelines

A static ARP entry is manually configured and maintained. It does not age out and cannot be overwritten by any dynamic ARP entry.

Static ARP entries can be classified into long and short static ARP entries. A short static ARP entry contains an IP-to-MAC mapping. A long static ARP entry contains an IP-to-MAC mapping, a VLAN, and an output interface.

A static ARP entry is effective when the device works correctly.

When the VLAN or VLAN interface is deleted, long static ARP entries in the VLAN are deleted, and resolved short static ARP entries in the VLAN become unresolved.

A resolved short static ARP entry becomes unresolved upon certain events. For example, it is unresolved if the output interface is down.

A long static ARP entry is ineffective when the corresponding VLAN interface or output interface is down. An ineffective long static ARP entry cannot be used to forward packets.

If you specify both the vlan-id and ip-address arguments, the IP address of the corresponding VLAN interface must be on the same network as the specified IP address.

If you do not specify a VPN, the undo arp command removes ARP entries only for the public network.

Examples

# Configure a static ARP entry that comprises IP address 202.38.10.2, MAC address 00e0-fc01-0000, and output interface FortyGigE 1/1/1 in VLAN 10.

<Sysname> system-view

[Sysname] arp static 202.38.10.2 00e0-fc01-0000 10 FortyGigE 1/1/1

Related commands

·     display arp

·     reset arp

arp timer aging

Use arp timer aging to set the aging timer for dynamic ARP entries.

Use undo arp timer aging to restore the default.

Syntax

arp timer aging aging-time

undo arp timer aging

Default

The aging timer for dynamic ARP entries is 20 minutes.

Views

System view

Predefined user roles

network-admin

Parameters

aging-time: Sets the aging timer for dynamic ARP entries, in the range of 1 to 1440 minutes.

Usage guidelines

Each dynamic ARP entry in the ARP table has a limited lifetime, called an aging timer. The aging timer of a dynamic ARP entry is reset each time the dynamic ARP entry is updated. Dynamic ARP entries that are not updated before their aging timers expire are deleted from the ARP table.

Set the aging timer for dynamic ARP entries as needed. For example, when you configure proxy ARP, set a short aging time so that invalid dynamic ARP entries can be deleted in time.

Examples

# Set the aging timer for dynamic ARP entries to 10 minutes.

<Sysname> system-view

[Sysname] arp timer aging 10

Related commands

display arp timer aging

display arp

Use display arp to display ARP entries.

Syntax

display arp [ [ all | dynamic | multiport | static ] [ slot slot-number ] | vlan vlan-id | interface interface-type interface-number ] [ count | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Displays all ARP entries.

dynamic: Displays dynamic ARP entries.

multiport: Displays multiport ARP entries.

static: Displays static ARP entries.

slot slot-number: Displays the ARP entries of an IRF member device. The slot-number argument specifies the ID of the IRF member device.

vlan vlan-id: Displays the ARP entries for the specified VLAN. The VLAN ID is in the range of 1 to 4094.

interface interface-type interface-number: Displays the ARP entries for the interface specified by the argument interface-type interface-number.

count: Displays the number of ARP entries.

verbose: Displays detailed information about ARP entries.

Usage guidelines

This command displays information about ARP entries, including the IP address, MAC address, VLAN ID, output interface, entry type, and aging timer.

If you do not specify any parameters, the command displays all ARP entries.

Examples

# Display all ARP entries.

<Sysname> display arp all

  Type: S-Static   D-Dynamic   O-Openflow   M-Multiport  I-Invalid

IP Address       MAC Address     VLAN     Interface              Aging Type

20.1.1.1         00e0-fc00-0001  N/A      N/A                    N/A   S

193.1.1.70       00e0-fe50-6503  100      FGE1/1/1               N/A   IS

192.168.0.115    000d-88f7-9f7d  1        FGE1/1/2               18    D

192.168.0.39     0012-a990-2241  1        FGE1/1/3               20    D

22.1.1.1         000c-299d-c041  10       N/A                    N/A   M

# Display detailed information about all ARP entries.

<Sysname> display arp all verbose

  Type: S-Static   D-Dynamic   O-Openflow   M-Multiport  I-Invalid

IP Address       MAC Address     VLAN     Interface             Aging Type

Vpn Instance

20.1.1.1         00e0-fc00-0001  N/A      N/A                    N/A   S

[No Vrf]

193.1.1.70       00e0-fe50-6503  100      FGE1/1/1               N/A   IS

[No Vrf]

192.168.0.115    000d-88f7-9f7d  1        FGE1/1/2               18    D

[No Vrf]

192.168.0.39     0012-a990-2241  1        FGE1/1/3              20    D

[No Vrf]

22.1.1.1         000c-299d-c041  10       N/A                    N/A   M

[No Vrf]

# Display the number of all ARP entries.

<Sysname> display arp all count

 Total number of entries : 5

Table 1 Command output

Field	Description
IP Address	IP address in an ARP entry.
MAC Address	MAC address in an ARP entry.
VLAN	ID of the VLAN to which the ARP entry belongs. This field displays N/A in either of the following situations: ·     The ARP entry is an unresolved short static ARP entry. ·     The output interface of the ARP entry does not belong to the VLAN.
Interface	Output interface in an ARP entry. This field displays N/A in either of the following situations: ·     The ARP entry is an unresolved short static ARP entry. ·     The ARP entry is a multiport ARP entry and has no output interface information. To obtain the output interface information of the multiport ARP entry, look up the MAC address table according to the MAC address in the ARP entry.
Aging	Aging time for a dynamic ARP entry in minutes. N/A means unknown aging time or no aging time.
Type	ARP entry type: ·     D—Dynamic. ·     S—Static. ·     O—OpenFlow. ·     M—Multiport. ·     I—Invalid.
Vpn Instance	Name of VPN instance. [No Vrf] is displayed if no VPN instance is configured for the ARP entry.
Total number of entries	Number of ARP entries.

 

Related commands

·     arp static

·     reset arp

display arp ip-address

Use display arp ip-address to display the ARP entry for an IP address.

Syntax

display arp ip-address [ slot slot-number ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ip-address: Displays the ARP entry for the specified IP address.

slot slot-number: Displays the specified ARP entry of an IRF member device. The slot-number argument specifies the ID of the IRF member device.

verbose: Displays the detailed information about the specified ARP entry.

Usage guidelines

The ARP entry information includes the IP address, MAC address, VLAN ID, output interface, entry type, and aging timer.

Examples

# Display the ARP entry for the IP address 20.1.1.1.

<Sysname> display arp 20.1.1.1

  Type: S-Static   D-Dynamic   O-Openflow   M-Multiport  I-Invalid

IP address       MAC address     VLAN     Interface              Aging Type

20.1.1.1         00e0-fc00-0001  N/A      N/A                    N/A   S

Related commands

·     arp static

·     reset arp

display arp timer aging

Use display arp timer aging to display the aging timer of dynamic ARP entries.

Syntax

display arp timer aging

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the aging timer of dynamic ARP entries.

<Sysname> display arp timer aging

Current ARP aging time is 10 minute(s)

Related commands

arp timer aging

display arp vpn-instance

Use display arp vpn-instance to display the ARP entries for a VPN instance.

Syntax

display arp vpn-instance vpn-instance-name [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.

count: Displays the number of ARP entries.

Usage guidelines

This command displays information about ARP entries for a VPN instance, including the IP address, MAC address, VLAN ID, output interface, entry type, and aging timer.

Examples

# Display ARP entries for the VPN instance named test.

<Sysname> display arp vpn-instance test

  Type: S-Static   D-Dynamic   O-Openflow   M-Multiport  I-Invalid

IP address       MAC address     VLAN ID  Interface              Aging Type

20.1.1.1         00e0-fc00-0001  N/A      N/A                    N/A   S

Related commands

·     arp static

·     reset arp

reset arp

Use reset arp to clear ARP entries from the ARP table.

Syntax

reset arp { all | dynamic | interface interface-type interface-number | multiport | slot slot-number | static }

Views

User view

Predefined user roles

network-admin

Parameters

all: Clears all ARP entries.

dynamic: Clears all dynamic ARP entries.

multiport: Clears all multiport ARP entries.

static: Clears all static ARP entries.

slot slot-number: Clears the ARP entries of an IRF member device. The slot-number argument specifies the ID of the IRF member device.

interface interface-type interface-number: Clears the ARP entries for the interface specified by the argument interface-type interface-number.

Usage guidelines

This command can separately clear static ARP entries, dynamic ARP entries, multiport ARP entries, or ARP entries on specified interfaces.

When the interface interface-type interface-number option is specified, this command clears only dynamic ARP entries for the specified interface.

When the slot slot-number option is specified, this command clears only dynamic ARP entries for the specified IRF member device.

Examples

# Clear all static ARP entries.

<Sysname> reset arp static

Related commands

·     arp static

·     display arp

arp ip-conflict log prompt

Use arp ip-conflict log prompt to enable IP conflict notification without conflict confirmation.

Use undo arp ip-conflict log prompt to restore the default.

Syntax

arp ip-conflict log prompt

undo arp ip-conflict log prompt

Default

IP conflict notification is disabled. The receiving device sends a gratuitous ARP request, and it displays an error message after it receives an ARP reply about the conflict.

Views

System view

Predefined user roles

network-admin

Examples

# Enable IP conflict notification on the device.

<Sysname> system-view

[Sysname] arp ip-conflict log prompt

arp send-gratuitous-arp

Use arp send-gratuitous-arp to enable periodic sending of gratuitous ARP packets and set the sending interval on an interface.

Use undo arp send-gratuitous-arp to disable the interface from periodically sending gratuitous ARP packets.

Syntax

arp send-gratuitous-arp [ interval milliseconds ]

undo arp send-gratuitous-arp

Default

Periodic sending of gratuitous ARP is disabled.

Views

Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view, VLAN interface view

Predefined user roles

network-admin

Parameters

interval milliseconds: Sets the interval at which gratuitous ARP packets are sent, in the range of 200 to 200000 milliseconds. The default value is 2000 milliseconds.

Usage guidelines

This function takes effect only when the enabled interface is up and an IP address has been assigned to the interface.

This function can send gratuitous ARP requests only for a VRRP virtual IP address, or the sending interface's primary IP address or manually configured secondary IP address. The primary IP address can be configured manually or automatically, whereas the secondary IP address must be configured manually.

If you change the interval for sending gratuitous ARP packets, the configuration takes effect at the next sending interval.

The frequency of sending gratuitous ARP packets might be much lower than expected when any of the following conditions exist:

·     This function is enabled on multiple interfaces.

·     Each interface is configured with multiple secondary IP addresses.

·     A small sending interval is configured in the preceding cases.

Examples

# Enable VLAN-interface 2 to send gratuitous ARP packets every 300 milliseconds.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] arp send-gratuitous-arp interval 300

gratuitous-arp-learning enable

Use gratuitous-arp-learning enable to enable learning of gratuitous ARP packets.

Use undo gratuitous-arp-learning enable to disable learning of gratuitous ARP packets.

Syntax

gratuitous-arp-learning enable

undo gratuitous-arp-learning enable

Default

Learning of gratuitous ARP packets is enabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

The learning of gratuitous ARP packets function allows a device to maintain its ARP table by creating or updating ARP entries based on received gratuitous ARP packets.

When this function is disabled, the device uses received gratuitous ARP packets to update existing ARP entries only. ARP entries are not created based on the received gratuitous ARP packets, which saves ARP table space.

Examples

# Enable learning of gratuitous ARP packets.

<Sysname> system-view

[Sysname] gratuitous-arp-learning enable

gratuitous-arp-sending enable

Use gratuitous-arp-sending enable to enable sending of gratuitous ARP packets upon receiving ARP requests whose sender IP address is on a different subnet.

Use undo gratuitous-arp-sending enable to restore the default.

Syntax

gratuitous-arp-sending enable

undo gratuitous-arp-sending enable

Default

A device does not send gratuitous ARP packets when it receives ARP requests whose sender IP address is on a different subnet.

Views

System view

Predefined user roles

network-admin

Examples

# Disable a device from sending gratuitous ARP packets upon receiving ARP requests whose sender IP address is on a different subnet.

<Sysname> system-view

[Sysname] undo gratuitous-arp-sending enable

display local-proxy-arp

Use display local-proxy-arp to display the local proxy ARP status.

Syntax

display local-proxy-arp [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Displays the local proxy ARP status for the specified interface.

Usage guidelines

The local ARP proxy status can be enabled or disabled.

If an interface is specified, this command displays the local proxy ARP status for the specified interface.

If no interface is specified, this command displays the local proxy ARP status for all interfaces.

Examples

# Display the local proxy ARP status for VLAN-interface 2.

<Sysname> display local-proxy-arp interface vlan-interface 2

Interface Vlan-interface2

 Local Proxy ARP status: enabled

Related commands

local-proxy-arp enable

display proxy-arp

Use display proxy-arp to display the proxy ARP status.

Syntax

display proxy-arp [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Displays the proxy ARP status for the specified interface.

Usage guidelines

The proxy ARP status can be enabled or disabled.

If an interface is specified, this command displays proxy ARP status for the specified interface.

If no interface is specified, this command displays proxy ARP status for all interfaces.

Examples

# Display the proxy ARP status on VLAN-interface 1.

<Sysname> display proxy-arp interface Vlan-interface 1

Interface Vlan-interface1

 Proxy ARP status: disabled

Related commands

proxy-arp enable

local-proxy-arp enable

Use local-proxy-arp enable to enable local proxy ARP.

Use undo local-proxy-arp enable to disable local proxy ARP.

Syntax

local-proxy-arp enable [ ip-range startIP to endIP ]

undo local-proxy-arp enable

Default

Local proxy ARP is disabled.

Views

VLAN interface view, Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view

Predefined user roles

network-admin

Parameters

ip-range startIP to endIP: Specifies the IP address range for which local proxy ARP is enabled. The start IP address must be lower than or equal to the end IP address.

Usage guidelines

Proxy ARP enables a device on a network to answer ARP requests for an IP address not on that network. With proxy ARP, hosts in different broadcast domains can communicate with each other as they do on the same network.

Proxy ARP includes common proxy ARP and local proxy ARP.

Common proxy ARP allows communication between hosts that connect to different Layer 3 interfaces and reside in different broadcast domains.

Local proxy ARP allows communication between hosts that connect to the same Layer 3 interface and reside in different broadcast domains.

Only one IP address range can be specified by using the ip-range keyword on an interface.

Examples

# Enable local proxy ARP on VLAN-interface 2.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] local-proxy-arp enable

# Enable local proxy ARP on VLAN-interface 2 for an IP address range.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] local-proxy-arp enable ip-range 1.1.1.1 to 1.1.1.20

Related commands

display local-proxy-arp

proxy-arp enable

Use proxy-arp enable to enable proxy ARP.

Use undo proxy-arp enable to disable proxy ARP.

Syntax

proxy-arp enable

undo proxy-arp enable

Default

Proxy ARP is disabled.

Views

VLAN interface view, Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view

Predefined user roles

network-admin

Usage guidelines

Proxy ARP enables a device on a network to answer ARP requests for an IP address not on that network. With proxy ARP, hosts in different broadcast domains can communicate with each other as they do on the same network.

Proxy ARP includes common proxy ARP and local proxy ARP.

Common proxy ARP allows communication between hosts that connect to different Layer 3 interfaces and reside in different broadcast domains.

Local proxy ARP allows communication between hosts that connect to the same Layer 3 interface and reside in different broadcast domains.

Examples

# Enable proxy ARP on VLAN-interface 2.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] proxy-arp enable

Related commands

display proxy-arp

arp snooping enable

Use arp snooping enable to enable ARP snooping.

Use undo arp snooping enable to disable ARP snooping.

Syntax

arp snooping enable

undo arp snooping enable

Default

ARP snooping is disabled.

Views

VLAN view

Predefined user roles

network-admin

Examples

# Enable ARP snooping on VLAN 2.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] arp snooping enable

display arp snooping

Use display arp snooping to display ARP snooping entries.

Syntax

display arp snooping [ vlan vlan-id ] [ slot slot-number ] [ count ]

display arp snooping ip ip-address [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vlan vlan-id: Displays ARP snooping entries for a VLAN. The vlan-id argument is in the range of 1 to 4094.

count: Displays the number of the current ARP snooping entries.

ip ip-address: Displays the ARP snooping entry for the specified IP address.

slot slot-number: Specifies an IRF member device. The slot-number argument is the member device ID in the IRF fabric.

Usage guidelines

If you do not specify any keywords or arguments, the command displays all ARP snooping entries.

Examples

# Display ARP snooping entries for VLAN 2.

<Sysname> display arp snooping vlan 2

IP Address   MAC Address    VLAN ID Interface  Aging       Status

3.3.3.3      0003-0003-0003 2       FGE1/1/1     20          Valid

3.3.3.4      0004-0004-0004 2       FGE1/1/2     5           Invalid

# Display the number of the current ARP snooping entries.

<Sysname> display arp snooping count

Total entries: 2

Table 2 Command output

Field	Description
IP Address	IP address in an ARP snooping entry.
MAC Address	MAC address in an ARP snooping entry.
VLAN ID	ID of the VLAN to which the ARP snooping entry belongs.
Interface	Input interface in an ARP snooping entry.
Aging	Aging time for an ARP snooping entry in minutes. If the card learns an ARP snooping entry from another card, the card cannot learn the aging time of the entry, and this field displays N/A.
Status	Status of an ARP snooping entry: Valid, Invalid, Collision.
Total entries	Number of ARP snooping entries.

 

Related commands

reset arp snooping

reset arp snooping

Use reset arp snooping to remove ARP snooping entries.

Syntax

reset arp snooping [ ip ip-address | vlan vlan-id ]

Views

User view

Predefined user roles

network-admin

Parameters

ip ip-address: Removes the ARP entry for the specified IP address.

vlan vlan-id: Removes the ARP entries for the specified VLAN. The vlan-id argument is in the range of 1 to 4094.

Usage guidelines

If you do not specify any keywords or arguments, the command removes all ARP snooping entries.

Examples

# Remove ARP snooping entries for VLAN 2.

<Sysname> reset arp snooping vlan 2

Related commands

display arp snooping

arp fast-reply enable

Use arp fast-reply enable to enable ARP fast-reply for a VLAN.

Use undo arp fast-reply enable to disable ARP fast-reply for a VLAN.

Syntax

arp fast-reply enable

undo arp fast-reply enable

Default

ARP fast-reply is disabled on a VLAN.

Views

VLAN view

Predefined user roles

network-admin

Examples

# Enable ARP fast-reply for VLAN 2.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] arp fast-reply enable