Login
- Table of Contents
-
- 06-Layer 3 - IP Services Command Reference
- 00-Preface
- 01-ARP commands
- 02-IP addressing commands
- 03-DNS commands
- 04-IP forwarding basics commands
- 05-Fast forwarding commands
- 06-Adjacency table commands
- 07-IRDP commands
- 08-IP performance optimization commands
- 09-UDP helper commands
- 10-IPv6 basics commands
- 11-IPv6 fast forwarding commands
- 12-Tunneling commands
- 13-GRE commands
- 14-HTTP redirect commands
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 01-ARP commands | 113.00 KB |
display arp safe-guard statistics
reset arp safe-guard statistics
gratuitous-arp-learning enable
ARP direct route advertisement commands
ARP commands
arp check enable
Use arp check enable to enable dynamic ARP entry check.
Use undo arp check enable to disable dynamic ARP entry check.
Syntax
arp check enable
undo arp check enable
Default
Dynamic ARP entry check is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Dynamic ARP entry check disables a device from supporting dynamic ARP entries with multicast MAC addresses. The device cannot learn dynamic ARP entries containing multicast MAC addresses. You cannot manually add static ARP entries that contain multicast MAC addresses.
When dynamic ARP entry check is disabled, ARP entries containing multicast MAC addresses are supported. The device can learn dynamic ARP entries containing multicast MAC addresses obtained from the ARP packets sourced from a unicast MAC address. You can also manually add static ARP entries containing multicast MAC addresses.
Examples
# Enable dynamic ARP entry check.
<Sysname> system-view
[Sysname] arp check enable
arp check log enable
Use arp check log enable to enable the ARP logging feature.
Use undo arp check log enable to disable the ARP logging feature.
Syntax
arp check log enable
undo arp check log enable
Default
ARP logging is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
This feature enables a device to log ARP events when ARP cannot resolve IP addresses correctly. The device can log the following ARP events:
· On a proxy ARP-disabled interface, the target IP address of a received ARP packet is not one of the following IP addresses:
¡ The IP address of the receiving interface.
¡ The virtual IP address of the VRRP group.
¡ The public IP address after NAT.
· The sender IP address of a received ARP reply conflicts with one of the following IP addresses:
¡ The IP address of the receiving interface.
¡ The virtual IP address of the VRRP group.
¡ The public IP address after NAT.
The device sends ARP log messages to the information center. You can use the info-center source command to specify the log output rules for the information center. For more information about information center, see Network Management and Monitoring Configuration Guide.
The device can generate a large number of ARP logs. To conserve system resources, enable ARP logging only when you are auditing or troubleshooting ARP events.
Examples
# Enable ARP logging.
<Sysname> system-view
[Sysname] arp check log enable
arp max-learning-num
Use arp max-learning-num to set the dynamic ARP learning limit on an interface.
Use undo arp max-learning-num to restore the default.
Syntax
arp max-learning-num max-number
undo arp max-learning-num
Default
The interface learning limit varies by the maximum remaining resources on the device.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/aggregate subinterface view
VXLAN VSI interface view
VLAN interface view
Predefined user roles
network-admin
Parameters
max-number: Specifies the maximum number of dynamic ARP entries that can be learned on an interface. The value range for this argument is 0 to 589824. For CSPC (excluding CSPC-GE16XP4L-E, CSPC-GE24L-E, and CSPC-GP24GE8XP2L-E cards) and CMPE-1104 cards, an interface can learn a maximum of 65535 dynamic ARP entries.
Usage guidelines
An interface can dynamically learn ARP entries. To prevent an interface from holding too many ARP entries, you can set the maximum number of dynamic ARP entries that the interface can learn. When the limit is reached, the interface stops learning ARP entries.
When the learning limit is set to 0, the interface is disabled from learning dynamic ARP entries.
Examples
# Specify VLAN-interface 40 to learn a maximum of 10 dynamic ARP entries.
<Sysname> system-view
[Sysname] interface vlan-interface 40
[Sysname-Vlan-interface40] arp max-learning-num 10
# Specify GigabitEthernet 3/1/1 to learn a maximum of 10 dynamic ARP entries.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] arp max-learning-num 10
# Specify Layer 2 aggregate interface Bridge-Aggregation 1 to learn a maximum of 10 dynamic ARP entries.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] arp max-learning-num 10
# Specify Layer 3 aggregate interface Route-Aggregation 1 to learn a maximum of 10 dynamic ARP entries.
<Sysname> system-view
[Sysname] interface route-aggregation 1
[Sysname-Route-Aggregation1] arp max-learning-num 10
arp max-learning-number
Use arp max-learning-number to set the dynamic ARP learning limit on a device.
Use undo arp max-learning-number to restore the default.
Syntax
In standalone mode:
arp max-learning-number max-number slot slot-number
undo arp max-learning-number slot slot-number
In IRF mode:
arp max-learning-number max-number chassis chassis-number slot slot-number
undo arp max-learning-number chassis chassis-number slot slot-number
Default
The device learning limit varies by the maximum remaining resources on the device.
Views
System view
Predefined user roles
network-admin
Parameters
max-number: Specifies the maximum number of dynamic ARP entries that can be learned on a device. The value range for this argument is 0 to 589824.For CSPC (excluding CSPC-GE16XP4L-E, CSPC-GE24L-E, and CSPC-GP24GE8XP2L-E cards) and CMPE-1104 cards, the device can learn a maximum of 65535 dynamic ARP entries.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
Usage guidelines
A device can dynamically learn ARP entries. To prevent a device from holding too many ARP entries, you can set the maximum number of dynamic ARP entries that the device can learn. When the limit is reached, the device stops learning ARP entries.
When the learning limit is set to 0, the device is disabled from learning dynamic ARP entries.
Examples
# Set the ARP learning limit to 64 for slot 3.
<Sysname> system-view
[Sysname] arp max-learning-number 64 slot 3
arp safe-guard enable
Use arp safe-guard enable to enable the ARP safe-guard feature.
Use undo safe-guard enable to disable the ARP safe-guard feature.
Syntax
arp safe-guard enable
undo arp safe-guard enable
Default
The ARP safe-guard feature is disabled.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/aggregate subinterface view
VLAN interface view
Predefined user roles
network-admin
Usage guidelines
This command is supported only on CSPEX (excluding the CSPEX-1204 and CSPEX-1104-E cards) and CEPC cards.
You can use this command to prevent traffic-intensive ARP packet attacks on a device. After you enable this feature, the device operates as follows:
· The device sends replies to all incoming ARP requests but do not generate corresponding ARP entries, which prevents gateway spoofing attacks.
· The device generates ARP entries for incoming ARP replies that the device requests.
· The device drops incoming ARP replies that are not requested by the device, which ensures that the device can learn correct ARP entries.
Examples
# Enable the ARP safe-guard feature on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] arp safe-guard enable
arp smooth
Use arp smooth to synchronize ARP entries from the active MPU to all other cards.
Syntax
arp smooth
Views
User view
Predefined user roles
network-admin
Usage guidelines
This command triggers a one-time operation to ensure that all cards on the device have the same ARP entries.
To synchronize ARP entries across all cards in a timely manner, you can schedule the device to automatically execute the arp smooth command. For information about scheduling a task, see Fundamentals Configuration Guide.
Examples
# Synchronize ARP entries from the active MPU to all other cards.
<Sysname> arp smooth
arp static
Use arp static to configure a static ARP entry.
Use undo arp to delete an ARP entry.
Syntax
arp static ip-address mac-address [ vlan-id interface-type interface-number | interface-type interface-number interface-type interface-number | vsi-interface vsi-interface-id tunnel number vsi vsi-name | vsi-interface vsi-interface-id interface-type interface-number service-instance instance-id vsi vsi-name] [ vpn-instance vpn-instance-name ]
undo arp ip-address [ vpn-instance-name ]
Default
No static ARP entries exist.
Views
System view
Predefined user roles
network-admin
Parameters
ip-address: Specifies an IP address for the static ARP entry.
mac-address: Specifies a MAC address for the static ARP entry, in the format of H-H-H.
vlan-id: Specifies the ID of a VLAN to which the static ARP entry belongs. The value range is 1 to 4094.
interface-type interface-number: Specifies an interface by its type and number.
vsi-interface vsi-interface-id: Specifies a VSI interface by its number, in the range of 1 to 31.
tunnel number: Specifies a tunnel interface by its number.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.
service-instance instance-id: Specifies an Ethernet service instance by its ID in the range of 1 to 4096. This option is a must if you specify a Layer 2 Ethernet interface for the preceding interface-type interface-number arguments. Do not specify this option if you specify an interface of other types for the preceding interface-type interface-number argument.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the static ARP entry belongs. The vpn-instance-name argument represents the VPN instance name, a case-sensitive string of 1 to 31 characters. The VPN instance must already exist. To specify a static ARP entry on the public network, do not specify this option.
Usage guidelines
A static ARP entry is manually configured and maintained. It does not age out and cannot be overwritten by any dynamic ARP entry.
Static ARP entries can be short or long.
A resolved short static ARP entry becomes unresolved upon certain events, for example, when the resolved output interface goes down, or the corresponding VLAN or VLAN interface is deleted.
Long static ARP entries are effective or ineffective. Ineffective long static ARP entries cannot be used for packet forwarding. A long static ARP entry is ineffective when any of the following conditions exists:
· The corresponding VLAN interface or output interface is down.
· The IP address in the entry conflicts with a local IP address.
· No local interface has an IP address in the same subnet as the IP address in the ARP entry.
If you specify the vlan-id interface-type interface-number argument, follow these restrictions and guidelines:
· The interface can be an Ethernet interface or an aggregate interface.
· The VLAN and VLAN interface must already exist. The specified Ethernet interface must belong to the specified VLAN.
· The IP address of the VLAN interface and the IP address specified by the ip-address argument must be on the same network.
· A long static ARP entry in a VLAN is deleted if the VLAN or VLAN interface is deleted.
On a PE-agg device that provides L2VPN access to the L3VPN network, an L3VE interface (input interface) might be connected to multiple L2VE subinterfaces (output interfaces). In this case, to configure a long static ARP entry, you must specify the interface-type interface-number interface-type interface-number argument to identify the mapping between input and output interfaces. For more information about L2VE interfaces and L3VE interfaces, see MPLS Configuration Guide.
On a VXLAN IP gateway that forwards traffic among VXLANs through VXLAN tunnels, a VSI interface can act as the gateway for multiple VXLANs. The VSI interface (input interface) might be connected to multiple VXLAN tunnel interfaces (output interfaces). In this case, you must specify the vsi-interface vsi-interface-id tunnel number vsi vsi-name parameters to identify a VSI interface-VSI-VXLAN tunnel interface binding. For more information about VSI interfaces, VSI, and VXLAN tunnel interfaces, see VXLAN Configuration Guide.
On a VXLAN IP gateway that forwards traffic from multiple local sites to remote sites, a VSI interface can act as the gateway for multiple local sites. The VSI interface (input interface) might be associated with multiple Ethernet services (output interfaces) on Layer 2 Ethernet interfaces through which the VSI interface connects to the local sites. In this case, you must specify the vsi-interface vsi-interface-id interface-type interface-number service-instance instance-id vsi vsi-name parameters to identify a VSI interface-Layer 2 Ethernet interface-Ethernet service instance-VSI binding. For more information about VSI interfaces, VSI, and Ethernet service instances, see VXLAN Configuration Guide.
Examples
# Configure a long static ARP entry that contains IP address 202.38.10.2, MAC address 00e0-fc01-0000, and output interface GigabitEthernet 3/1/1 in VLAN 10.
<Sysname> system-view
[Sysname] arp static 202.38.10.2 00e0-fc01-0000 10 gigabitethernet 3/1/1
# Configure a long static ARP entry that contains IP address 1.1.1.1, MAC address 00e0-fc01-0000, input interface VE-L3VPN 1, and output interface VE-L2VPN 1.1.
<Sysname> system-view
[Sysname] arp static 1.1.1.1 00e0-fc01-0000 ve-l3vpn 1 ve-l2vpn 1.1
# Configure a long static ARP entry that contains IP address 1.1.1.1, MAC address 00e0-fc01-0000, input interface VSI-interface 1, output interface Tunnel 1, and VSI a.
<Sysname> system-view
[Sysname] arp static 1.1.1.1 00e0-fc01-0000 vsi-interface 1 tunnel 1 vsi a
# Configure a long static ARP entry that contains IP address 1.1.1.1, MAC address 00e0-fc01-0000, input interface VSI-interface 1, output interface Ethernet instance 1 on GigabitEthernet 3/1/1, and VSI a.
<Sysname> system-view
[Sysname] arp static 1.1.1.1 00e0-fc01-0000 vsi-interface 1 gigabitethernet 3/1/1 service-instance 1 vsi a
Related commands
display arp
reset arp
arp timer aging
Use arp timer aging to set the aging timer for dynamic ARP entries.
Use undo arp timer aging to restore the default.
Syntax
arp timer aging aging-time
undo arp timer aging
Default
The aging timer for dynamic ARP entries is 20 minutes.
Views
System view
Predefined user roles
network-admin
Parameters
aging-time: Specifies the aging timer for dynamic ARP entries, in the range of 1 to 1440 minutes.
Usage guidelines
Each dynamic ARP entry in the ARP table has a limited lifetime, called an aging timer. The aging timer of a dynamic ARP entry is reset each time the dynamic ARP entry is updated. Dynamic ARP entries that are not updated before their aging timers expire are deleted from the ARP table.
Set the aging timer for dynamic ARP entries as needed. For example, when you configure proxy ARP, set a short aging time so that invalid dynamic ARP entries can be deleted in a timely manner.
Examples
# Set the aging timer for dynamic ARP entries to 10 minutes.
<Sysname> system-view
Related commands
display arp timer aging
display arp
Use display arp to display ARP entries.
Syntax
In standalone mode:
display arp [ [ all | dynamic | static ] [ slot slot-number ] | vlan vlan-id | interface interface-type interface-number ] [ count | verbose ]
In IRF mode:
display arp [ [ all | dynamic | static ] [ chassis chassis-number slot slot-number ] | vlan vlan-id | interface interface-type interface-number ] [ count | verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
all: Displays all ARP entries.
dynamic: Displays dynamic ARP entries.
static: Displays static ARP entries.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays ARP entries for the active MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays ARP entries for the global active MPU. (In IRF mode.)
vlan vlan-id: Specifies a VLAN by its VLAN ID. The VLAN ID is in the range of 1 to 4094.
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays ARP entries for all interfaces.
count: Displays the number of ARP entries.
verbose: Displays detailed information about ARP entries.
Usage guidelines
This command displays information about static, multiport, and dynamic ARP entries, including the IP address, MAC address, VLAN ID, output interface, entry type, and aging timer.
Examples
# Display all ARP entries.
Type: S-Static D-Dynamic O-Openflow R-Rule I-Invalid
IP address MAC address SVLAN/VSI Interface/Link ID Aging Type
1.1.1.1 02e0-f102-0023 1 GE3/1/1 -- S
1.1.1.2 00e0-fc00-0001 12 GE3/1/2 16 D
1.1.1.3 00e0-fe50-6503 12 Tunnel1 15 D
1.1.1.4 000d-88f7-9f7d 12 0x1 16 D
# Display detailed information about all ARP entries.
<Sysname> display arp all verbose
IP address : 1.1.1.1 MAC address : 02e0-f102-0023
Type : Static Aging : --
Interface : GE3/1/1 SVLAN/CVLAN : 1000/1001
VPN instance : --
Link ID : --
VXLAN ID : --
VSI name : --
VSI interface : --
Nickname : 0x0000
IP address : 1.1.1.2 MAC address : 0015-e944-adc5
Type : Dynamic Aging : 16 min
Interface : GE3/1/2 SVLAN/CVLAN : --/--
VPN instance : --
Link ID : --
VXLAN ID : --
VSI name : --
VSI interface : --
Nickname : 0x0000
# Display the number of all ARP entries.
<Sysname> display arp all count
Total number of entries : 4
Table 1 Command output
|
Field |
Description |
|
IP address |
IP address in an ARP entry. |
|
MAC address |
MAC address in an ARP entry. |
|
SVLAN/VSI |
ID of the SVLAN or index of the VSI to which the ARP entry belongs. This field displays hyphens (--) in either of the following situations: · The ARP entry is an unresolved short static ARP entry. · The output interface of the ARP entry does not belong to any SVLAN or VSI. |
|
Interface |
Output interface in an ARP entry. This field displays hyphens (--) in either of the following situations: · The ARP entry is an unresolved short static ARP entry. ·
The ARP entry is a multiport ARP entry and has
no output interface information. |
|
Link ID |
Link ID in an ARP entry. This field displays hyphens (--) if the ARP entry does not belong to any VSI. |
|
Aging |
Aging time for an ARP entry, in minutes. For a static ARP entry, this field always displays hyphens (--). The static ARP entry never ages out unless you delete it manually. For a dynamic ARP entry, this field displays hyphens (--) if the aging time is unknown. |
|
Type |
ARP entry type: · D—Dynamic. · S—Static. · O—OpenFlow. · R—Rule. · I—Invalid. |
|
SVLAN/CVLAN |
ID of the SVLAN or CVLAN to which the ARP entry belongs. This field displays hyphens (--) in either of the following situations: · The ARP entry is an unresolved short static ARP entry. · The output interface of the ARP entry does not belong to a specific SVLAN or CVLAN. |
|
VPN instance |
Name of VPN instance. This field displays hyphens (--) if no VPN instance is configured for the ARP entry. |
|
VXLAN ID |
VXLAN ID (also called VNI). This field displays hyphens (--) if the ARP entry does not belong to any VXLAN. |
|
VSI name |
Name of the VSI to which the ARP entry belongs. This field displays hyphens (--) if the ARP entry does not belong to a specific VSI. |
|
VSI interface |
VSI interface specified for the VSI. This field displays hyphens (--) if no VSI interface is specified for the VSI. |
|
Nickname |
Nickname of the ARP entry. The nickname is a string of four hexadecimal numbers, for example, 012a. |
|
Total number of entries |
Number of ARP entries. |
Related commands
arp static
reset arp
display arp entry-limit
Use display arp entry-limit to display the maximum number of ARP entries that a device supports.
Syntax
display arp entry-limit
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display the maximum number of ARP entries that the device supports.
<Sysname> display arp entry-limit
ARP entries: 262144
display arp ip-address
Use display arp ip-address to display the ARP entry for an IP address.
Syntax
In standalone mode:
display arp ip-address [ slot slot-number ] [ verbose ]
In IRF mode:
display arp ip-address [ chassis chassis-number slot slot-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ip-address: Displays the ARP entry for the specified IP address.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information for the active MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays information for the global active MPU. (In IRF mode.)
verbose: Displays the detailed information about the specified ARP entry.
Usage guidelines
The ARP entry information includes the IP address, MAC address, VLAN ID, output interface, entry type, and aging timer.
Examples
# Display the ARP entry for the IP address 20.1.1.1.
<Sysname> display arp 20.1.1.1
Type: S-Static D-Dynamic O-Openflow R-Rule I-Invalid
IP address MAC address VLAN/VSI name Interface Aging Type
20.1.1.1 00e0-fc00-0001 -- -- -- S
Related commands
arp static
reset arp
display arp safe-guard statistics
Use display arp safe-guard statistics to display ARP safe-guard statistics.
Syntax
In standalone mode:
display arp safe-guard statistics slot slot-number
In IRF mode:
display arp safe-guard statistics chassis chassis-number slot slot-number
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. (In IRF mode.)
Usage guidelines
This command is supported only on CSPEX (excluding the CSPEX-1204 and CSPEX-1104-E cards) and CEPC cards.
Examples
# Display ARP safe-guard statistics.
<Sysname> display arp safe-guard statistics slot 3
ARP replies sent by the driver: 1234
ARP replies dropped by the driver: 100
Table 2 Command output
|
Field |
Description |
|
ARP replies sent by the driver |
Number of ARP replies that the driver sent to the device. |
|
ARP replies dropped by the driver |
Number of illegal ARP replies that the driver dropped. |
Related commands
arp safe-guard enable
reset arp safe-guard statistics
display arp timer aging
Use display arp timer aging to display the aging timer of dynamic ARP entries.
Syntax
display arp timer aging
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display the aging timer of dynamic ARP entries.
<Sysname> display arp timer aging
Current ARP aging time is 20 minute(s)(default)
Related commands
arp timer aging
display arp vpn-instance
Use display arp vpn-instance to display the ARP entries for a VPN instance.
Syntax
display arp vpn-instance vpn-instance-name [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. The VPN instance name cannot contain any spaces.
count: Displays the number of ARP entries.
Usage guidelines
This command displays information about ARP entries for a VPN instance, including the IP address, MAC address, VLAN ID, output interface, entry type, and aging timer.
Examples
# Display ARP entries for VPN instance test.
<Sysname> display arp vpn-instance test
Type: S-Static D-Dynamic O-Openflow R-Rule I-Invalid
IP address MAC address SVLAN/VSI Interface/Link ID Aging Type
20.1.1.1 00e0-fc00-0001 -- -- -- S
Related commands
arp static
reset arp
reset arp
Use reset arp to clear ARP entries from the ARP table.
Syntax
In standalone mode:
reset arp { all | dynamic | interface interface-type interface-number | slot slot-number | static }
In IRF mode:
reset arp { all | chassis chassis-number slot slot-number | dynamic | interface interface-type interface-number | static }
Views
User view
Predefined user roles
network-admin
Parameters
all: Clears all ARP entries.
dynamic: Clears all dynamic ARP entries.
static: Clears all static ARP entries.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears ARP entries for the active MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears ARP entries for the global active MPU. (In IRF mode.)
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command clears ARP entries for all interfaces.
Examples
# Clear all static ARP entries.
<Sysname> reset arp static
arp static
display arp
reset arp safe-guard statistics
Use reset arp safe-guard statistics to clear ARP safe-guard statistics.
Syntax
In standalone mode:
reset arp safe-guard statistics { all | slot slot-number }
In IRF mode:
reset arp safe-guard statistics { all | chassis chassis-number slot slot-number }
Views
User view
Predefined user roles
network-admin
Parameters
all: Specifies all ARP safe-guard statistics.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. (In IRF mode.)
Usage guidelines
This command is supported only on CSPEX (excluding the CSPEX-1204 and CSPEX-1104-E cards) and CEPC cards.
Examples
# Clear ARP safe-guard statistics.
<Sysname> reset arp safe-guard statistics all
Related commands
arp safe-guard enable
display arp safe-guard statistics
Gratuitous ARP commands
arp ip-conflict log prompt
Use arp ip-conflict log prompt to enable IP conflict notification.
Use undo arp ip-conflict log prompt to restore the default.
Syntax
arp ip-conflict log prompt
undo arp ip-conflict log prompt
Default
IP conflict notification is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
By default, the device performs the following operations if it is using the sender IP address of a received ARP packet:
· Sends a gratuitous ARP request.
· Displays an error message after the device receives an ARP reply about the conflict.
You can use this command to enable the device to display error messages before sending a gratuitous ARP reply or request for conflict confirmation.
Examples
# Enable IP conflict notification on the device.
<Sysname> system-view
[Sysname] arp ip-conflict log prompt
arp send-gratuitous-arp
Use arp send-gratuitous-arp to enable periodic sending of gratuitous ARP packets on an interface.
Use undo arp send-gratuitous-arp to disable the interface from periodically sending gratuitous ARP packets.
Syntax
arp send-gratuitous-arp [ interval interval ]
undo arp send-gratuitous-arp
Default
Periodic sending of gratuitous ARP packets is disabled.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
VLAN interface view
VSI interface view
Predefined user roles
network-admin
Parameters
interval interval: Specifies the sending interval in the range of 200 to 200000 milliseconds. The default value is 2000 milliseconds.
Usage guidelines
This feature takes effect on an interface only when the interface has an IP address and the data link layer state of the interface is up.
This feature can send gratuitous ARP requests only for a VRRP virtual IP address, or the sending interface's primary IP address or manually configured secondary IP address. The primary IP address can be configured manually or automatically, whereas the secondary IP address must be configured manually.
If you change the sending interval for gratuitous ARP packets, the configuration takes effect at the next sending interval.
The sending interval for gratuitous ARP packets might be much longer than the set interval when any of the following conditions exist:
· This feature is enabled on multiple interfaces.
· Each interface is configured with multiple secondary IP addresses.
· A small sending interval is configured in the preceding cases.
Examples
# Enable GigabitEthernet 3/1/1 to send gratuitous ARP packets every 300 milliseconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] arp send-gratuitous-arp interval 300
gratuitous-arp-learning enable
Use gratuitous-arp-learning enable to enable learning of gratuitous ARP packets.
Use undo gratuitous-arp-learning enable to disable learning of gratuitous ARP packets.
Syntax
gratuitous-arp-learning enable
undo gratuitous-arp-learning enable
Default
Learning of gratuitous ARP packets is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
The learning of gratuitous ARP packets feature allows a device to maintain its ARP table by creating or updating ARP entries based on received gratuitous ARP packets.
When this feature is disabled, the device uses received gratuitous ARP packets to update existing ARP entries only. ARP entries are not created based on the received gratuitous ARP packets, which saves ARP table space.
Examples
# Enable learning of gratuitous ARP packets.
<Sysname> system-view
[Sysname] gratuitous-arp-learning enable
gratuitous-arp-sending enable
Use gratuitous-arp-sending enable to enable sending gratuitous ARP packets upon receiving ARP requests whose sender IP address is on a different subnet.
Use undo gratuitous-arp-sending enable to disable sending gratuitous ARP packets upon receiving ARP requests whose sender IP address is on a different subnet.
Syntax
gratuitous-arp-sending enable
undo gratuitous-arp-sending enable
Default
A device does not send gratuitous ARP packets when it receives ARP requests whose sender IP address is on a different subnet.
Views
System view
Predefined user roles
network-admin
Examples
# Disable a device from sending gratuitous ARP packets upon receiving ARP requests whose sender IP address is on a different subnet.
<Sysname> system-view
[Sysname] undo gratuitous-arp-sending enable
Proxy ARP commands
display local-proxy-arp
Use display local-proxy-arp to display the local proxy ARP status.
Syntax
display local-proxy-arp [ interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays the local proxy ARP status for all interfaces.
Usage guidelines
You can use this command to check whether local proxy ARP is enabled or disabled.
Examples
# Display the local proxy ARP status for GigabitEthernet 3/1/1.
<Sysname> display local-proxy-arp interface gigabitethernet 3/1/1
Interface GigabitEthernet3/1/1
Local Proxy ARP status: enabled
Related commands
local-proxy-arp enable
display proxy-arp
Use display proxy-arp to display the proxy ARP status.
Syntax
display proxy-arp [ interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays the proxy ARP status for all interfaces.
Usage guidelines
You can use this command to check whether proxy ARP is enabled or disabled.
Examples
# Display the proxy ARP status on GigabitEthernet 3/1/1.
<Sysname> display proxy-arp interface gigabitethernet 3/1/1
Interface GigabitEthernet3/1/1
Proxy ARP status: disabled
Related commands
proxy-arp enable
local-proxy-arp enable
Use local-proxy-arp enable to enable local proxy ARP.
Use undo local-proxy-arp enable to disable local proxy ARP.
Syntax
local-proxy-arp enable [ ip-range start-ip-address to end-ip-address ]
undo local-proxy-arp enable
Default
Local proxy ARP is disabled.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
VLAN interface view
VSI interface view
Predefined user roles
network-admin
Parameters
ip-range start-ip-address to end-ip-address: Specifies the IP address range for which local proxy ARP is enabled. The start IP address must be lower than or equal to the end IP address.
Usage guidelines
Proxy ARP enables a device on a network to answer ARP requests for an IP address not on that network. With proxy ARP, hosts in different broadcast domains can communicate with each other as they do on the same network.
Proxy ARP includes common proxy ARP and local proxy ARP.
Common proxy ARP allows communication between hosts that connect to different Layer 3 interfaces and reside in different broadcast domains.
Local proxy ARP allows communication between hosts that connect to the same Layer 3 interface and reside in different broadcast domains.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Enable local proxy ARP on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] local-proxy-arp enable
# Enable local proxy ARP on GigabitEthernet 3/1/1 for an IP address range.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] local-proxy-arp enable ip-range 1.1.1.1 to 1.1.1.20
Related commands
display local-proxy-arp
proxy-arp enable
Use proxy-arp enable to enable proxy ARP.
Use undo proxy-arp enable to disable proxy ARP.
Syntax
proxy-arp enable
undo proxy-arp enable
Default
Proxy ARP is disabled.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
VLAN interface view
VSI interface view
Predefined user roles
network-admin
Usage guidelines
Proxy ARP enables a device on a network to answer ARP requests for an IP address not on that network. With proxy ARP, hosts in different broadcast domains can communicate with each other as they do on the same network.
Proxy ARP includes common proxy ARP and local proxy ARP.
Common proxy ARP allows communication between hosts that connect to different Layer 3 interfaces and reside in different broadcast domains.
Local proxy ARP allows communication between hosts that connect to the same Layer 3 interface and reside in different broadcast domains.
Examples
# Enable proxy ARP on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] proxy-arp enable
Related commands
display proxy-arp
ARP direct route advertisement commands
arp route-direct advertise
Use arp route-direct advertise to enable ARP direct route advertisement.
Use undo arp route-direct advertise to disable ARP direct route advertisement.
Syntax
arp route-direct advertise
undo arp route-direct advertise
Default
ARP direct route advertisement is disabled.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
L3VE interface view
Predefined user roles
network-admin
Examples
# Enable ARP direct route advertisement on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] arp route-direct advertise
# Enable ARP direct route advertisement on L3VE interface VE-L3VPN 1.
<Sysname> system-view
[Sysname] interface ve-l3vpn 1
[Sysname-VE-L3VPN1] arp route-direct advertise
