22-ARP Command

Download


Chapter 1  ARP Configuration Commands

1.1  ARP Configuration Commands

1.1.1  arp check enable

Syntax

arp check enable

undo arp check enable

View

System view

Parameter

None

Description

Use the arp check enable command to enable ARP entry checking, so as to disable the switch from learning ARP entries with multicast MAC addresses.

Use the undo arp check enable command to disable ARP entry checking. In this case, the switch is allowed to learn multicast MAC address ARP entries.

By default, ARP entry checking is enabled.

Example

# Enable the switch to learn multicast MAC address ARP entries.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] undo arp check enable

1.1.2  arp max-entry

Syntax

arp max-entry number

undo arp max-entry

View

System view

Parameter

number: Total maximum number of ARP entries, in the range of 4,096 to 8,192.

Description

Use the arp max-entry command to set the total maximum number of ARP entries.

Use the undo arp max-entry command to restore the default setting.

By default, the total maximum number of ARP entries is 8,192.

Example

# Set the total maximum number of ARP entries to 4,096.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] arp max-entry 4096

1.1.3  arp max-dynamic-entry

Syntax

arp max-dynamic-entry number

undo arp max-dynamic-entry

View

Port view

Parameter

number: Maximum number of dynamic ARP entries that can be learnt by the port, ranging from 0 to 8,192.

Description

Use the arp max-dynamic-entry command to set the maximum number of dynamic ARP entries that can be learnt by a port.

Use the undo arp max-dynamic-entry command to restore the default setting.

By default, the maximum number of dynamic ARP entries that can be learnt by a port is 2,048.

Example

# Set maximum number of dynamic ARP entries that can be learnt by GE 3/0/1 to 6,000.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface GigabitEthernet 3/0/1

[H3C GigabitEthernet3/0/1] arp max-dynamic-entry 6000

1.1.4  arp proxy enable

Syntax

arp proxy enable

undo arp proxy enable

View

VLAN interface view

Parameter

None

Description

Use the arp proxy enable command to enable ARP proxy.

Use the undo arp proxy enable command to disable ARP proxy.

You can use the arp proxy enable command to enable the switch to provide Layer 3 connectivity between hosts in different VLANs on the switch.

By default, ARP proxy is disabled.

Related command: display arp proxy.

Example

# Enable ARP proxy on VLAN–interface 2.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Vlan-interface 2

[H3C-Vlan-interface2] arp proxy enable

1.1.5  arp proxy source-vlan enable

Syntax

arp proxy source-vlan enable

undo arp proxy source-vlan enable

View

VLAN interface view

Parameter

None

Description

Use the arp proxy source-vlan enable command to enable intra-VLAN ARP proxy, so that ARP proxy is able to process intra-VLAN ARP requests to provide Layer 3 connectivity between Layer 2 isolated ports in the same VLAN.

Use the undo arp proxy source-vlan enable command to disable intra-VLAN ARP proxy, so that ARP proxy only processes inter-VLAN ARP requests instead of intra-VLAN ARP request.

By default, intra-VLAN ARP proxy is disabled, and ARP proxy only processes inter-VLAN ARP requests after it is enabled.

Note that, intra-VLAN ARP proxy can be enabled only after ARP proxy is enabled.

Related command: arp proxy enable, display arp proxy.

Example

# With ARP proxy enabled, enable intra-VLAN ARP proxy for VLAN 2.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Vlan-interface 2

[H3C-Vlan-interface2] arp proxy source-vlan enable

1.1.6  arp source-suppression limit

Syntax

arp source-suppression limit { total | local | through } limit-value

undo arp source-suppression limit { total | local | through }

View

System view

Parameter

total: Sets the maximum number of total arbitrary ARP packets that can be sent to the CPU in a unit of time. (There is no limit on source and destination IP addresses in ARP packets.)

local: Sets the maximum number of locally-terminated ARP packets (packets having the same source IP address and using the IP address of the current switch as their destination IP address) that can be sent to the CPU in a unit of time.

through: Sets the maximum number of pass-through ARP packets (packets having the same source IP address and not using the IP address of the current switch as their destination IP addresses) that can be sent to the CPU in a unit of time.

limit-value: Maximum number of a type of ARP packets that can be sent to the CPU in a unit of time. When local or total is adopted, this argument ranges from 1 to 4294967295; when through is adopted, the value ranges from 0 to 4294967295.

Description

Use the arp source-suppression limit command to set the maximum number of a type of ARP packets that can be sent to the CPU in a unit of time.

Use the undo arp source-suppression limit command to restore the default setting.

The default setting varies with the type of ARP packets.

l           When total is adopted in the command, the default setting is 100.

l           When local is adopted in the command, the default setting is 3.

l           When through is adopted in the command, the default setting is 3.

Make sure your setting for total is greater than the settings for local and through.

Related command: display arp source-suppression.

Example

# Configure to allow a maximum of 200 ARP packets to be sent to the CPU totally.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] arp source-suppression limit total 200

1.1.7  arp static

Syntax

arp static ip-address mac-address [ vlan-id interface-type interface-number ]

undo arp ip-address

View

System view

Parameter

ip-address: IP address for the ARP entry to be created/removed.

mac-address: MAC address for the ARP entry to be created, in the format of H-H-H.

vlan-id: ID of the VLAN to which the static ARP entry belongs, in the range of 1 to 4094.

interface-type: Type of the port to which the static ARP entry belongs.

interface-number: Number of the port to which the static ARP entry belongs.

Description

Use the arp static command to create a static ARP entry in the ARP table.

Use the undo arp command to remove an ARP entry.

By default, there is no static ARP entry in the ARP table, and ARP entries are dynamically created by ARP.

Note that:

l           A static ARP entry keeps valid as long as the Ethernet switch operates normally, unless it is removed as the result of some operation like removing the VLAN of the entry. By default, a dynamic ARP entry keeps valid for 20 minutes.

l           The VLAN specified by the vlan-id argument in the arp static command must be an existing VLAN, and the port specified by the interface-type and interface-number arguments must belong to the VLAN.

Related command: reset arp, display arp.

Example

# Create a static ARP entry belonging to Ethernet1/0/1 in VLAN 1, with IP address 202.38.10.2 and MAC address 000f-e201-0000.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] arp static 202.38.10.2 000f-e201-0000 1 Ethernet 1/0/1

1.1.8  arp timer aging

Syntax

arp timer aging aging-time

undo arp timer aging

View

System view

Parameter

aging-time: Aging time for dynamic ARP entries. This argument ranges from 1 to 1,440 in minutes.

Description

Use the arp timer aging command to configure the aging time for dynamic ARP entries.

Use the undo arp timer aging command to restore the default aging time.

By default, the aging time for dynamic ARP entries is 20 minutes.

Related command: display arp timer aging.

Example

# Set the aging time for dynamic ARP entries to 10 minutes.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] arp timer aging 10

1.1.9  display arp

Syntax

display arp [ dynamic | static | ip-address ]

View

Any view

Parameter

dynamic: Displays dynamic ARP entries.

static: Displays static ARP entries.

ip-address: IP address. The ARP entry containing this IP address will be displayed.

Description

Use the display arp command to display ARP entries.

Executing this command without any parameter will display all ARP entries.

Related command: arp static, reset arp.

Example

# Display all ARP entries.

<H3C> display arp

            Type: S-Static   D-Dynamic

IP Address       MAC Address     VLAN ID  Port Name / AL ID      Aging Type

10.2.72.162      000a-000a-0aaa  N/A      N/A                    N/A   S

192.168.0.77     0000-e8f5-6a4a  1        Ethernet1/0/2          13    D

192.168.0.2      000d-88f8-4e88  1        Ethernet1/0/2          14    D

192.168.0.200    0014-222c-9d6a  1        Ethernet1/0/2          14    D

192.168.0.45     000d-88f6-44c1  1        Ethernet1/0/2          15    D

192.168.0.110    0011-4301-991e  1        Ethernet1/0/2          15    D

192.168.0.32     0000-e8f5-73ee  1        Ethernet1/0/2          16    D

192.168.0.3      0014-222c-aa69  1        Ethernet1/0/2          16    D

192.168.0.17     000d-88f6-379c  1        Ethernet1/0/2          17    D

192.168.0.115    000d-88f7-9f7d  1        Ethernet1/0/2          18    D

192.168.0.43     000c-760a-172d  1        Ethernet1/0/2          18    D

192.168.0.33     000d-88f6-44ba  1        Ethernet1/0/2          20    D

192.168.0.35     000f-e202-2181  1        Ethernet1/0/2          20    D

192.168.0.5      000f-3d80-2b38  1        Ethernet1/0/2          20    D

 

---   14 entries found   ---

Table 1-1 Description on the fields of the display arp command

Field

Description

IP Address

IP address contained in an ARP entry

MAC Address

MAC address contained in the ARP entry

VLAN ID

ID of the VLAN to which the ARP entry belongs

Port Name / AL ID

Index of the port to which the ARP entry belongs

Aging

Aging time of the ARP entry if it is a dynamic entry, in minutes

Type

Type of the ARP entry

 

1.1.10  display arp |

Syntax

display arp | { begin | exclude | include } text

View

Any view

Parameter

begin: Displays the ARP entries from the first ARP entry that contains the string specified by the text argument.

exclude: Displays the ARP entries that do not contain the string specified by the text argument.

include: Displays the ARP entries that contain the string specified by the text argument.

text: String used to filter ARP entries.

Description

Use the display arp | command to display the ARP entries matching a specified rule.

Related command: arp static, reset arp.

Example

# Display the ARP entries that contain the string “77”.

<H3C> display arp | include 77

            Type: S-Static   D-Dynamic

IP Address       MAC Address     VLAN ID  Port Name / AL ID      Aging Type

192.168.0.77     0000-e8f5-6a4a  1        Ethernet1/0/2          12    D

 

---   1 entry found   ---

# Display the ARP entries that do not contain the string “68”.

<H3C> display arp | exclude 68

            Type: S-Static   D-Dynamic

IP Address       MAC Address     VLAN ID  Port Name / AL ID      Aging Type

10.2.72.162      000a-000a-0aaa  N/A      N/A                    N/A   S

 

---   1 entry found   ---

See Table 1-1 for the description of the output fields.

1.1.11  display arp entry-limit

Syntax

display arp entry-limit [ interface interface-type interface-number ]

View

Any view

Parameter

interface-type: Port type.

interface-number: Port number.

Description

Use the display arp entry-limit command to display the number limits of ARP entries.

If you specify a port, the command will display the total maximum number of ARP entries and the maximum number of dynamic ARP entries on the port.

If you do not specify a port, the command will display the total maximum number of ARP entries and the maximum number of dynamic ARP entries on each port.

Example

# Display the current number limits of ARP entries.

<H3C> display arp entry-limit

 The maximum ARP entry number is 8192

 The maximum dynamic ARP entry number of the port GigabitEthernet0/0/1 is 2048

 The maximum dynamic ARP entry number of the port GigabitEthernet0/0/2 is 2048

 The maximum dynamic ARP entry number of the port GigabitEthernet0/0/3 is 2048

 The maximum dynamic ARP entry number of the port GigabitEthernet0/0/4 is 2048

 The maximum dynamic ARP entry number of the port GigabitEthernet3/0/1 is 6000

……

1.1.12  display arp interface

Syntax

display arp interface interface-type interface-number

View

Any view

Parameter

interface-type: Port type.

Interface-number: Port number.

Description

Use the display arp interface command to display the ARP entries of a specified port.

Example

# Display the ARP entries of Ethernet3/0/1.

<H3C> display arp interface ethernet 3/0/1

            Type: S-Static   D-Dynamic

IP Address    MAC Address    VLAN ID Port Name        Aging Type

10.1.1.2      000f-e201-0102 1       Ethernet3/0/1    N/A   S

1.1.13  display arp proxy

Syntax

display arp proxy [ interface interface-type interface-number ]

View

Any view

Parameter

interface-type: Interface type.

interface-number: Interface number.

Description

Use the display arp proxy command to display the status of ARP proxy (enabled/disabled).

Related command: arp proxy enable.

Example

# Display the status of ARP proxy on VLAN–interface 2.

<H3C> display arp proxy interface Vlan-interface 2

Interface Vlan-interface2

 Proxy ARP status: disabled

1.1.14  display arp slot

Syntax

display arp slot slot-id

View

Any view

Parameter

slot-id: ID of a slot.

Description

Use the display arp slot command to display the ARP entries of all ports on the specified slot.

Example

# Display the ARP entries on the third slot.

<H3C> display arp slot 3

            Type: S-Static   D-Dynamic

IP Address    MAC Address    VLAN ID Port Name        Aging Type

10.1.1.2      000f-e201-0102 1       Ethernet3/0/1    N/A   S

1.1.15  display arp source-suppression

Syntax

display arp source-suppression

View

Any view

Parameter

None

Description

Use the display arp source-suppression command to display the ARP source suppression configuration on the current switch.

Example

# Display the ARP source suppression configuration on the current switch.

<H3C> display arp source-suppression

ARP suppression limit total: 4294967295

ARP suppression limit local: 3

ARP suppression limit through: 3

1.1.16  display arp vlan

Syntax

display arp vlan vlan-id

View

Any view

Parameter

vlan-id: VLAN ID.

Description

Use the display arp vlan command to display the ARP entries of all ports in a specified VLAN.

Example

# Display the ARP entries of VLAN 1.

<H3C> display arp vlan 1

            Type: S-Static   D-Dynamic

IP Address    MAC Address    VLAN ID Port Name        Aging Type

10.1.1.2      000f-e201-0102 1       Ethernet3/0/1    N/A   S

1.1.17  display arp timer aging

Syntax

display arp timer aging

View

Any view

Parameter

None

Description

Use the display arp timer aging command to display the setting for ARP aging timer.

Related command: arp timer aging.

Example

# Display the setting for ARP aging timer.

<H3C> display arp timer aging

Current ARP aging time is 20 minute(s)(default)

The above information shows that the time for ARP aging timer is 20 minutes.

1.1.18  gratuitous-arp-learning enable

Syntax

gratuitous-arp-learning enable

undo gratuitous-arp-learning enable

View

System view

Parameter

None

Description

Use the gratuitous-arp-learning enable command to enable gratuitous ARP learning.

Use the undo gratuitous-arp-learning enable command to disable gratuitous ARP learning.

By default, gratuitous ARP learning is disabled.

With gratuitous ARP learning enabled, a switch operates as follows when receiving a gratuitous ARP packet:

If an ARP entry in the cache matches the packet, the switch updates the ARP entry using the sender hardware address carried in the gratuitous ARP packet.

If no ARP entry in the cache matches the packet, an ARP entry corresponding to the packet is added to the cache.

Example

# Enable gratuitous ARP learning on the switch named H3CA.

<H3CA> system-view

System View: return to User View with Ctrl+Z.

[H3CA] gratuitous-arp-learning enable

1.1.19  reset arp

Syntax

reset arp [ dynamic | static | interface interface-type interface-number ]

View

User view

Parameter

dynamic: Clears dynamic ARP entries.

static: Clears static ARP entries.

interface-type: Port type.

interface-number: Port number.

Description

Use the reset arp command to clear ARP entries.

Related command: arp static, display arp.

Example

# Clear static ARP entries.

<H3C> reset arp static