Aruba JE072A User guide

Category
Software
Type
User guide
HPE Networking Comware
5120v3 Switch
Series
IP Services Command Reference
Software
version: Release 6352P02 and later
Document version: 6W100-20230715
© Copyright 2023 Hewlett Packard Enterprise Development LP
The information contained herein is subject to change without notice. The only warranties for Hewlett Packard
Enterprise products and services are set forth in the express warranty statements accompanying such
products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett
Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or
copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software
Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s
standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise
website.
Acknowledgments
Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the
United States and other countries.
Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the
United States and/or other countries.
Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.
Java and Oracle are registered trademarks of Oracle and/or its affiliates.
UNIX® is a registered trademark of The Open Group.
i
Contents
ARP commands ····························································································· 1
arp check enable ········································································································································ 1
arp check log enable ·································································································································· 1
arp mac-interface-consistency check enable ····························································································· 2
arp max-learning-num ································································································································ 3
arp max-learning-number ··························································································································· 4
arp multiport ··············································································································································· 4
arp smooth ················································································································································· 5
arp static ····················································································································································· 6
arp timer aging ··········································································································································· 7
arp timer aging probe-count ······················································································································· 8
arp timer aging probe-interval ···················································································································· 9
arp user-ip-conflict record enable············································································································· 10
arp user-move record enable ··················································································································· 11
display arp ················································································································································ 11
display arp entry-limit ······························································································································· 14
display arp ip-address ······························································································································ 14
display arp openflow count ······················································································································· 15
display arp timer aging ····························································································································· 15
display arp user-ip-conflict record ············································································································ 16
display arp user-move record ··················································································································· 17
reset arp ··················································································································································· 19
Gratuitous ARP commands ········································································· 20
arp ip-conflict log prompt ·························································································································· 20
arp send-gratuitous-arp ···························································································································· 20
gratuitous-arp mac-change retransmit ····································································································· 21
gratuitous-arp-learning enable ················································································································· 22
gratuitous-arp-sending enable ················································································································· 22
Proxy ARP commands ················································································· 24
display local-proxy-arp ····························································································································· 24
display proxy-arp ······································································································································ 24
local-proxy-arp enable ······························································································································ 25
proxy-arp enable ······································································································································ 26
ARP snooping commands ··········································································· 27
arp snooping enable································································································································· 27
display arp snooping ································································································································ 27
reset arp snooping ··································································································································· 28
ARP direct route advertisement commands ················································· 30
arp route-direct advertise ························································································································· 30
IP addressing commands ············································································ 31
display ip interface ··································································································································· 31
display ip interface brief ··························································································································· 33
ip address ················································································································································· 35
ip address unnumbered ··························································································································· 36
DHCP commands ························································································ 38
Common DHCP commands ····························································································································· 38
dhcp client-detect ····································································································································· 38
dhcp dscp ················································································································································· 38
dhcp enable ·············································································································································· 39
dhcp log enable ········································································································································ 39
dhcp select ··············································································································································· 40
ii
DHCP server commands ································································································································· 41
address range ·········································································································································· 41
bims-server ·············································································································································· 42
bootfile-name ··········································································································································· 43
class ip-pool ············································································································································· 44
class option-group ···································································································································· 45
class range ··············································································································································· 45
default ip-pool ··········································································································································· 46
dhcp apply-policy ····································································································································· 47
dhcp class ················································································································································ 48
dhcp option-group ···································································································································· 49
dhcp policy ··············································································································································· 49
dhcp server always-broadcast ················································································································· 50
dhcp server apply ip-pool ························································································································· 51
dhcp server bootp ignore ························································································································· 51
dhcp server bootp reply-rfc-1048 ············································································································· 52
dhcp server check mac-address ·············································································································· 52
dhcp server database filename ················································································································ 53
dhcp server database update interval ······································································································ 54
dhcp server database update now ··········································································································· 55
dhcp server database update stop ··········································································································· 56
dhcp server forbidden-ip ·························································································································· 56
dhcp server ip-pool ··································································································································· 57
dhcp server ping packets ························································································································· 58
dhcp server ping timeout ·························································································································· 59
dhcp server relay information enable ······································································································· 59
dhcp server request-ip-address check ····································································································· 60
display dhcp server conflict ······················································································································ 61
display dhcp server database ·················································································································· 62
display dhcp server expired ····················································································································· 62
display dhcp server free-ip ······················································································································· 63
display dhcp server ip-in-use ··················································································································· 64
display dhcp server pool ·························································································································· 65
display dhcp server statistics ··················································································································· 68
dns-list ······················································································································································ 69
domain-name ··········································································································································· 70
expired ····················································································································································· 71
forbidden-ip ·············································································································································· 71
gateway-list ·············································································································································· 72
if-match ···················································································································································· 73
ip-in-use threshold ···································································································································· 76
nbns-list ···················································································································································· 76
netbios-type ·············································································································································· 77
network ····················································································································································· 78
next-server ··············································································································································· 79
option ······················································································································································· 80
reset dhcp server conflict ························································································································· 81
reset dhcp server expired ························································································································· 81
reset dhcp server ip-in-use ······················································································································· 82
reset dhcp server statistics ······················································································································· 82
static-bind ················································································································································· 83
tftp-server domain-name ·························································································································· 84
tftp-server ip-address ······························································································································· 85
valid class ················································································································································· 85
verify class ··············································································································································· 86
voice-config ·············································································································································· 87
DHCP relay agent commands ························································································································· 88
dhcp relay check mac-address ················································································································ 88
dhcp relay check mac-address aging-time······························································································· 88
dhcp relay client-information record ········································································································· 89
dhcp relay client-information refresh ········································································································ 90
dhcp relay client-information refresh enable ···························································································· 90
iii
dhcp relay dhcp-server timeout ················································································································ 91
dhcp relay gateway ·································································································································· 92
dhcp relay information circuit-id ··············································································································· 93
dhcp relay information enable ·················································································································· 94
dhcp relay information remote-id ·············································································································· 95
dhcp relay information strategy ················································································································ 96
dhcp relay master-server switch-delay ····································································································· 97
dhcp relay release ip ································································································································ 98
dhcp relay server-address ························································································································ 98
dhcp relay server-address algorithm ········································································································ 99
dhcp relay source-address ····················································································································· 100
dhcp smart-relay enable ························································································································· 101
dhcp-server timeout ······························································································································· 102
display dhcp relay check mac-address ·································································································· 102
display dhcp relay client-information ······································································································ 103
display dhcp relay information ················································································································ 104
display dhcp relay server-address ········································································································· 105
display dhcp relay statistics ···················································································································· 106
gateway-list ············································································································································ 108
master-server switch-delay ···················································································································· 108
remote-server ········································································································································· 109
remote-server algorithm ························································································································· 110
reset dhcp relay client-information ········································································································· 110
reset dhcp relay statistics ······················································································································· 111
DHCP client commands ································································································································· 111
dhcp client class-id ································································································································· 111
dhcp client dad enable ··························································································································· 112
dhcp client dscp ····································································································································· 113
dhcp client identifier ······························································································································· 113
display dhcp client ·································································································································· 114
ip address dhcp-alloc ····························································································································· 117
DHCP snooping commands ··························································································································· 117
dhcp snooping binding database filename ····························································································· 117
dhcp snooping binding database update interval ··················································································· 119
dhcp snooping binding database update now ························································································ 120
dhcp snooping binding record ················································································································ 120
dhcp snooping check mac-address········································································································ 121
dhcp snooping check request-message································································································· 121
dhcp snooping deny ······························································································································· 122
dhcp snooping disable ··························································································································· 123
dhcp snooping enable ···························································································································· 123
dhcp snooping enable vlan ···················································································································· 124
dhcp snooping information circuit-id······································································································· 125
dhcp snooping information enable ········································································································· 126
dhcp snooping information remote-id ····································································································· 127
dhcp snooping information strategy ······································································································· 128
dhcp snooping information vendor-specific ···························································································· 129
dhcp snooping log enable ······················································································································ 130
dhcp snooping max-learning-num ·········································································································· 131
dhcp snooping rate-limit ························································································································· 132
dhcp snooping trust ································································································································ 132
dhcp snooping trust interface ················································································································· 133
display dhcp snooping binding ··············································································································· 134
display dhcp snooping binding database ······························································································· 135
display dhcp snooping information ········································································································· 136
display dhcp snooping packet statistics ································································································· 138
display dhcp snooping trust ···················································································································· 138
reset dhcp snooping binding ·················································································································· 139
reset dhcp snooping packet statistics ···································································································· 140
BOOTP client commands······························································································································· 140
display bootp client ································································································································· 140
ip address bootp-alloc ···························································································································· 141
iv
DNS commands ························································································ 143
display dns domain ································································································································ 143
display dns host ····································································································································· 143
display dns server ·································································································································· 145
display ipv6 dns server ··························································································································· 145
dns domain ············································································································································· 146
dns dscp ················································································································································· 147
dns proxy enable ···································································································································· 148
dns server ·············································································································································· 148
dns source-interface ······························································································································· 149
dns spoofing ··········································································································································· 150
dns trust-interface ·································································································································· 150
ip host ····················································································································································· 151
ipv6 dns dscp ········································································································································· 152
ipv6 dns server ······································································································································· 152
ipv6 dns spoofing ··································································································································· 153
ipv6 host ················································································································································· 154
reset dns host ········································································································································· 155
Basic IP forwarding commands ································································· 156
display fib ··············································································································································· 156
ip forwarding-table save ························································································································· 157
Fast forwarding commands ········································································ 159
display ip fast-forwarding aging-time ······································································································ 159
display ip fast-forwarding cache ············································································································· 159
display ip fast-forwarding fragcache ······································································································· 160
ip fast-forwarding aging-time ·················································································································· 161
ip fast-forwarding load-sharing ··············································································································· 162
reset ip fast-forwarding cache ················································································································ 162
IP performance optimization commands ···················································· 163
display icmp statistics ····························································································································· 163
display ip statistics ································································································································· 163
display rawip ·········································································································································· 165
display rawip verbose ····························································································································· 166
display tcp ·············································································································································· 169
display tcp statistics ······························································································································· 169
display tcp verbose ································································································································ 171
display udp ············································································································································· 175
display udp statistics ······························································································································ 176
display udp verbose ······························································································································· 176
ip forward-broadcast ······························································································································ 179
ip icmp error-interval ······························································································································ 180
ip icmp receive enable ··························································································································· 181
ip icmp send enable ······························································································································· 182
ip icmp source ········································································································································ 184
ip mtu ····················································································································································· 184
ip reassemble local enable ····················································································································· 185
ip redirects enable ·································································································································· 186
ip ttl-expires enable ································································································································ 186
ip unreachables enable ·························································································································· 187
reset ip statistics ····································································································································· 188
reset tcp statistics ··································································································································· 188
reset udp statistics ································································································································· 189
tcp mss ··················································································································································· 189
tcp path-mtu-discovery ··························································································································· 190
tcp syn-cookie enable ···························································································································· 191
tcp timer fin-timeout ································································································································ 191
tcp timer syn-timeout ······························································································································ 192
tcp timestamps enable ··························································································································· 193
v
tcp window ············································································································································· 193
UDP helper commands ·············································································· 195
display udp-helper interface ··················································································································· 195
reset udp-helper statistics ······················································································································ 195
udp-helper broadcast-map ····················································································································· 196
udp-helper enable ·································································································································· 197
udp-helper port ······································································································································· 197
udp-helper server ··································································································································· 198
IPv6 basics commands ·············································································· 200
display ipv6 fib ········································································································································ 200
display ipv6 icmp statistics ····················································································································· 201
display ipv6 interface ······························································································································ 202
display ipv6 interface prefix ···················································································································· 206
display ipv6 nd snooping count vlan ······································································································ 207
display ipv6 nd snooping vlan ················································································································ 208
display ipv6 nd user-ip-conflict record ···································································································· 209
display ipv6 nd user-move record ·········································································································· 211
display ipv6 neighbors ···························································································································· 212
display ipv6 neighbors count ·················································································································· 214
display ipv6 neighbors entry-limit ··········································································································· 215
display ipv6 pathmtu ······························································································································ 215
display ipv6 prefix ··································································································································· 216
display ipv6 rawip ··································································································································· 217
display ipv6 rawip verbose ····················································································································· 218
display ipv6 statistics ······························································································································ 222
display ipv6 tcp ······································································································································· 223
display ipv6 tcp verbose ························································································································· 224
display ipv6 udp ····································································································································· 228
display ipv6 udp verbose ························································································································ 229
ipv6 address ··········································································································································· 232
ipv6 address anycast ····························································································································· 233
ipv6 address auto ··································································································································· 234
ipv6 address auto link-local ···················································································································· 234
ipv6 address eui-64 ································································································································ 235
ipv6 address link-local ···························································································································· 236
ipv6 address prefix-number ···················································································································· 237
ipv6 hop-limit ·········································································································································· 238
ipv6 hoplimit-expires enable ··················································································································· 239
ipv6 icmpv6 error-interval ······················································································································· 239
ipv6 icmpv6 multicast-echo-reply enable ······························································································· 240
ipv6 icmpv6 source ································································································································ 241
ipv6 mtu ·················································································································································· 241
ipv6 nd autoconfig managed-address-flag ····························································································· 242
ipv6 nd autoconfig other-flag ·················································································································· 243
ipv6 nd dad attempts ······························································································································ 243
ipv6 nd ns retrans-timer ························································································································· 244
ipv6 nd nud reachable-time ···················································································································· 245
ipv6 nd online-offline-log enable ············································································································ 245
ipv6 nd ra boot-file-url ···························································································································· 246
ipv6 nd ra dns search-list ······················································································································· 247
ipv6 nd ra dns search-list suppress········································································································ 248
ipv6 nd ra dns server ······························································································································ 249
ipv6 nd ra dns server suppress ·············································································································· 250
ipv6 nd ra halt ········································································································································· 251
ipv6 nd ra hop-limit unspecified ·············································································································· 252
ipv6 nd ra interval ··································································································································· 253
ipv6 nd ra no-advlinkmtu ························································································································ 253
ipv6 nd ra prefix ······································································································································ 254
ipv6 nd ra prefix default ·························································································································· 255
ipv6 nd ra router-lifetime ························································································································ 256
vi
ipv6 nd router-preference ······················································································································· 257
ipv6 nd snooping dad retrans-timer ········································································································ 258
ipv6 nd snooping enable global·············································································································· 258
ipv6 nd snooping enable link-local ········································································································· 259
ipv6 nd snooping glean source ·············································································································· 259
ipv6 nd snooping lifetime ························································································································ 260
ipv6 nd snooping max-learning-num ······································································································ 261
ipv6 nd snooping uplink·························································································································· 261
ipv6 nd user-ip-conflict record enable ···································································································· 262
ipv6 nd user-move record enable··········································································································· 263
ipv6 neighbor ·········································································································································· 263
ipv6 neighbor link-local minimize ··········································································································· 265
ipv6 neighbor stale-aging ······················································································································· 265
ipv6 neighbor timer stale-aging ·············································································································· 266
ipv6 neighbors max-learning-num ·········································································································· 267
ipv6 pathmtu ··········································································································································· 267
ipv6 pathmtu age ···································································································································· 268
ipv6 prefer temporary-address ··············································································································· 269
ipv6 prefix ··············································································································································· 269
ipv6 reassemble local enable ················································································································· 270
ipv6 redirects enable ······························································································································ 271
ipv6 temporary-address ························································································································· 271
ipv6 unreachables enable ······················································································································ 273
local-proxy-nd enable ····························································································································· 273
proxy-nd enable ····································································································································· 274
reset ipv6 nd snooping vlan ··················································································································· 274
reset ipv6 neighbors ······························································································································· 275
reset ipv6 pathmtu ·································································································································· 276
reset ipv6 statistics ································································································································· 276
DHCPv6 commands ·················································································· 277
Common DHCPv6 commands ······················································································································· 277
display ipv6 dhcp duid ···························································································································· 277
ipv6 dhcp advertise pd-route ·················································································································· 277
ipv6 dhcp dscp ······································································································································· 278
ipv6 dhcp log enable ······························································································································ 278
ipv6 dhcp select ····································································································································· 279
DHCPv6 server commands···························································································································· 280
address range ········································································································································ 280
address-alloc-mode eui-64 ····················································································································· 281
class pool ··············································································································································· 282
default pool ············································································································································· 282
display ipv6 dhcp option-group ·············································································································· 283
display ipv6 dhcp pool ···························································································································· 285
display ipv6 dhcp prefix-pool ·················································································································· 287
display ipv6 dhcp server ························································································································· 289
display ipv6 dhcp server conflict ············································································································ 290
display ipv6 dhcp server database ········································································································· 291
display ipv6 dhcp server expired ············································································································ 292
display ipv6 dhcp server ip-in-use ·········································································································· 292
display ipv6 dhcp server pd-in-use ········································································································· 294
display ipv6 dhcp server statistics ·········································································································· 296
dns-server ·············································································································································· 298
domain-name ········································································································································· 299
if-match ·················································································································································· 299
ipv6 dhcp apply-policy ···························································································································· 301
ipv6 dhcp class ······································································································································· 302
ipv6 dhcp option-group ··························································································································· 303
ipv6 dhcp policy ······································································································································ 304
ipv6 dhcp pool ········································································································································ 304
ipv6 dhcp prefix-pool ······························································································································ 305
ipv6 dhcp server ····································································································································· 306
vii
ipv6 dhcp server apply pool ··················································································································· 307
ipv6 dhcp server database filename ······································································································ 308
ipv6 dhcp server database update interval ···························································································· 310
ipv6 dhcp server database update now ································································································· 310
ipv6 dhcp server database update stop ································································································· 311
ipv6 dhcp server forbidden-address ······································································································· 312
ipv6 dhcp server forbidden-prefix ··········································································································· 313
network ··················································································································································· 313
option ····················································································································································· 315
option-group ··········································································································································· 316
prefix-pool ·············································································································································· 317
reset ipv6 dhcp server conflict················································································································ 318
reset ipv6 dhcp server expired ··············································································································· 318
reset ipv6 dhcp server ip-in-use ············································································································· 319
reset ipv6 dhcp server pd-in-use ············································································································ 319
reset ipv6 dhcp server statistics ············································································································· 320
sip-server ··············································································································································· 321
static-bind ··············································································································································· 321
temporary address range ······················································································································· 323
DHCPv6 relay agent commands ···················································································································· 324
display ipv6 dhcp relay server-address ·································································································· 324
display ipv6 dhcp relay statistics ············································································································ 325
gateway-list ············································································································································ 327
ipv6 dhcp advertise address-route ········································································································· 328
ipv6 dhcp relay client-link-address enable ····························································································· 328
ipv6 dhcp relay gateway ························································································································· 329
ipv6 dhcp relay interface-id ···················································································································· 330
ipv6 dhcp relay server-address ·············································································································· 331
ipv6 dhcp relay source-address ············································································································· 332
remote-server ········································································································································· 332
reset ipv6 dhcp relay statistics ··············································································································· 333
DHCPv6 client commands ····························································································································· 334
display ipv6 dhcp client ·························································································································· 334
display ipv6 dhcp client statistics ··········································································································· 336
ipv6 address dhcp-alloc ························································································································· 337
ipv6 dhcp client dscp ······························································································································ 338
ipv6 dhcp client duid ······························································································································· 339
ipv6 dhcp client pd ································································································································· 340
ipv6 dhcp client stateful ·························································································································· 340
ipv6 dhcp client stateless enable ··········································································································· 341
reset ipv6 dhcp client statistics ··············································································································· 342
DHCPv6 snooping commands ······················································································································· 342
display ipv6 dhcp snooping binding ······································································································· 342
display ipv6 dhcp snooping binding database························································································ 343
display ipv6 dhcp snooping packet statistics·························································································· 344
display ipv6 dhcp snooping pd binding ·································································································· 345
display ipv6 dhcp snooping trust ············································································································ 346
ipv6 dhcp snooping binding database filename ····················································································· 347
ipv6 dhcp snooping binding database update interval ··········································································· 349
ipv6 dhcp snooping binding database update now ················································································ 349
ipv6 dhcp snooping binding record ········································································································ 350
ipv6 dhcp snooping check request-message ························································································· 350
ipv6 dhcp snooping deny ······················································································································· 351
ipv6 dhcp snooping disable ···················································································································· 352
ipv6 dhcp snooping enable ···················································································································· 353
ipv6 dhcp snooping enable vlan ············································································································· 353
ipv6 dhcp snooping log enable··············································································································· 354
ipv6 dhcp snooping option interface-id enable ······················································································· 355
ipv6 dhcp snooping option interface-id string ························································································· 355
ipv6 dhcp snooping option remote-id enable ························································································· 356
ipv6 dhcp snooping option remote-id string ··························································································· 357
ipv6 dhcp snooping pd binding record ··································································································· 357
viii
ipv6 dhcp snooping rate-limit ················································································································· 358
ipv6 dhcp snooping trust ························································································································ 359
ipv6 dhcp snooping trust interface ········································································································· 359
reset ipv6 dhcp snooping binding··········································································································· 360
reset ipv6 dhcp snooping packet statistics ····························································································· 361
reset ipv6 dhcp snooping pd binding ······································································································ 361
DHCPv6 guard commands ···························································································································· 362
device-role ·············································································································································· 362
display ipv6 dhcp guard policy ··············································································································· 363
if-match reply acl ···································································································································· 364
if-match server acl ·································································································································· 365
ipv6 dhcp guard apply policy ·················································································································· 366
ipv6 dhcp guard policy ··························································································································· 367
preference ·············································································································································· 368
trust port ················································································································································· 369
IPv6 fast forwarding commands ································································· 371
display ipv6 fast-forwarding aging-time ·································································································· 371
display ipv6 fast-forwarding cache ········································································································· 371
ipv6 fast-forwarding aging-time ·············································································································· 372
ipv6 fast-forwarding load-sharing ··········································································································· 373
reset ipv6 fast-forwarding cache ············································································································ 374
HTTP redirect commands ·········································································· 375
http-redirect https-port ···························································································································· 375
http-redirect ssl-server-policy ················································································································· 375
NAT commands ························································································· 377
display nat session ································································································································· 377
display nat static ····································································································································· 379
nat static enable ····································································································································· 380
nat static outbound ································································································································· 380
reset nat session ···································································································································· 381
Document conventions and icons ······························································ 383
Conventions ··················································································································································· 383
Network topology icons ·································································································································· 384
Support and other resources ····································································· 385
Accessing Hewlett Packard Enterprise Support····························································································· 385
Accessing updates ········································································································································· 385
Websites ················································································································································ 386
Customer self repair ······························································································································· 386
Remote support ······································································································································ 386
Documentation feedback ······················································································································· 386
Index ·········································································································· 388
1
ARP commands
arp check enable
Use arp check enable to enable dynamic ARP entry check.
Use undo arp check enable to disable dynamic ARP entry check.
Syntax
arp check enable
undo arp check enable
Default
Dynamic ARP entry check is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Dynamic ARP entry check disables a device from supporting dynamic ARP entries with multicast
MAC addresses. The device cannot learn dynamic ARP entries containing multicast MAC addresses.
You cannot manually add static ARP entries that contain multicast MAC addresses.
When dynamic ARP entry check is disabled, ARP entries containing multicast MAC addresses are
supported. The device can learn dynamic ARP entries containing multicast MAC addresses obtained
from the ARP packets sourced from a unicast MAC address. You can also manually add static ARP
entries containing multicast MAC addresses.
Examples
# Enable dynamic ARP entry check.
<Sysname> system-view
[Sysname] arp check enable
arp check log enable
Use arp check log enable to enable the ARP logging feature.
Use undo arp check log enable to disable the ARP logging feature.
Syntax
arp check log enable
undo arp check log enable
Default
ARP logging is disabled.
Views
System view
2
Predefined user roles
network-admin
Usage guidelines
This feature enables a device to log ARP events when ARP cannot resolve IP addresses correctly.
The log information helps administrators locate and solve problems. The device can log the following
ARP events:
•
On a proxy ARP-disabled interface, the target IP address of a received ARP packet is not one of
the following IP addresses:
ï‚¡ The IP address of the receiving interface.
ï‚¡ The virtual IP address of the VRRP group.
•
The sender IP address of a received ARP reply conflicts with one of the following IP addresses:
ï‚¡ The IP address of the receiving interface.
ï‚¡ The virtual IP address of the VRRP group.
The device sends ARP log messages to the information center. You can use the info-center
source command to specify the log output rules for the information center. For more information
about information center, see Network Management and Monitoring Configuration Guide.
The device can generate a large number of ARP logs. To conserve system resources, enable ARP
logging only when you are auditing or troubleshooting ARP events.
Examples
# Enable ARP logging.
<Sysname> system-view
[Sysname] arp check log enable
arp mac-interface-consistency check enable
Use arp mac-interface-consistency check enable to enable interface consistency
check between ARP and MAC address entries.
Use undo arp mac-interface-consistency check enable to disable this feature.
Syntax
arp mac-interface-consistency check enable
undo arp mac-interface-consistency check enable
Default
Interface consistency check between ARP and MAC address entries is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
In an unstable network, the receiving interface for packets from a user might change. The interface in
the MAC address entry can be updated immediately while the interface in the ARP entry cannot. In
this case, the packets matching the ARP entry will be sent out of an incorrect interface. To solve this
problem, you can use this feature to periodically check the interface consistency between the ARP
and MAC address entry for a user. If the interfaces are not the same, ARP sends ARP requests in the
VLAN of the ARP entry and updates the entry with the ARP reply receiving interface.
3
Use display mac-address to display MAC address entries.
Examples
# Enable interface consistency check between ARP and MAC address entries.
<Sysname> system-view
[Sysname] arp mac-interface-consistency check enable
Related commands
display mac-address (Layer 2—LAN Switching Command Reference)
arp max-learning-num
Use arp max-learning-num to set the dynamic ARP learning limit for an interface.
Use undo arp max-learning-num to restore the default.
Syntax
arp max-learning-num max-number [ alarm alarm-threshold ]
undo arp max-learning-num
Default
An interface can learn a maximum of 1024 dynamic ARP entries
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
VLAN interface view
Predefined user roles
network-admin
Parameters
max-number: Specifies the maximum number of dynamic ARP entries for an interface. The value
range for this argument is 0 to 1024.
alarm alarm-threshold: Specifies an alarm threshold for dynamic ARP learning, in percentage.
The value range for the alarm-threshold argument is 1 to 100. The device generates a log
message when the number of dynamic ARP entries learned on an interface reaches the value
calculated by using the formula: (max-number × alarm-threshold)/100. If you do not specify
the alarm threshold, the device does not generate log messages.
Usage guidelines
An interface can dynamically learn ARP entries. To prevent an interface from holding too many ARP
entries, you can set the maximum number of dynamic ARP entries that the interface can learn. When
the maximum number is reached, the interface stops learning ARP entries.
When the number argument is set to 0, the interface is disabled from learning dynamic ARP entries.
Examples
# Specify VLAN-interface 40 to learn a maximum of 10 dynamic ARP entries.
<Sysname> system-view
[Sysname] interface vlan-interface 40
[Sysname-Vlan-interface40] arp max-learning-num 10
# Specify GigabitEthernet 1/0/1 to learn a maximum of 10 dynamic ARP entries.
4
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] arp max-learning-num 10
# Specify Layer 2 aggregate interface Bridge-Aggregation 1 to learn a maximum of 10 dynamic ARP
entries.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] arp max-learning-num 10
arp max-learning-number
Use arp max-learning-number to set the dynamic ARP learning limit for a device.
Use undo arp max-learning-number to restore the default.
Syntax
arp max-learning-number max-number slot slot-number
undo arp max-learning-number slot slot-number
Default
A device can learn a maximum of 1024 dynamic ARP entries
Views
System view
Predefined user roles
network-admin
Parameters
max-number: Specifies the maximum number of dynamic ARP entries for a device. The value
range for this argument is 0 to 1024.
slot slot-number: Specifies an IRF member device by its member ID.
Usage guidelines
A device can dynamically learn ARP entries. To prevent a device from holding too many ARP entries,
you can set the maximum number of dynamic ARP entries that the device can learn. When the
maximum number is reached, the device stops learning ARP entries.
When the number argument is set to 0, the device is disabled from learning dynamic ARP entries.
Examples
# Set the ARP learning limit to 64 for slot 1.
<Sysname> system-view
[Sysname] arp max-learning-number 64 slot 1
arp multiport
Use arp multiport to configure a multiport ARP entry.
Use undo arp to delete an ARP entry.
Syntax
arp multiport ip-address mac-address vlan-id
5
undo arp ip-address
Default
No multiport ARP entries exist.
Views
System view
Predefined user roles
network-admin
Parameters
ip-address: Specifies an IP address for the multiport ARP entry.
mac-address: Specifies a MAC address for the multiport ARP entry, in the format of H-H-H.
vlan-id: Specifies a VLAN for the multiport ARP entry, in the range of 1 to 4094. The specified
VLAN must already exist.
Usage guidelines
If the corresponding VLAN or the VLAN interface is deleted, the multiport ARP entry is also deleted.
To make the multiport ARP entry effective for packet forwarding, you must configure a multicast or
multiport unicast MAC address entry to specify multiple output interfaces. The MAC address entry
must have the same MAC address and VLAN ID as the multiport ARP entry. In addition, the IP
address in the multiport ARP entry must reside on the same subnet as the VLAN interface of the
specified VLAN.
If an aggregate interface is the output interface of an entry and its member ports reside on multiple
IRF member devices, the device cannot use the entry to forward packets. To resolve this issue, set
the global link-aggregation load sharing mode to a mode other than source or destination MAC
address-based by using the link-aggregation global load-sharing mode command.
For more information about this command, see Ethernet link aggregation in Layer 2—LAN Switching
Command Reference.
Examples
# Configure a multiport ARP entry that contains IP address 202.38.10.2 and MAC address
00e0-fc01-0000 in VLAN 10.
<Sysname> system-view
[Sysname] arp multiport 202.38.10.2 00e0-fc01-0000 10
Related commands
display arp multiport
reset arp multiport
arp smooth
Use arp smooth to synchronize ARP entries from the master device to all subordinate devices.
Syntax
arp smooth
Views
User view
Predefined user roles
network-admin
6
Examples
# Synchronize ARP entries from the master device to all subordinate devices.
<Sysname> arp smooth
arp static
Use arp static to configure a static ARP entry.
Use undo arp to delete an ARP entry.
Syntax
arp static ip-address mac-address [ vlan-id interface-type
interface-number ]
undo arp ip-address
Default
No static ARP entries exist.
Views
System view
Predefined user roles
network-admin
Parameters
ip-address: Specifies an IP address for the static ARP entry.
mac-address: Specifies a MAC address for the static ARP entry, in the format of H-H-H.
vlan-id: Specifies the ID of a VLAN to which the static ARP entry belongs. The value range is 1 to
4094.
interface-type interface-number: Specifies an interface by its type and number.
Usage guidelines
A static ARP entry is manually configured and maintained. It does not age out and cannot be
overwritten by any dynamic ARP entry.
Static ARP entries can be short or long.
A resolved short static ARP entry becomes unresolved upon certain events, for example, when the
resolved output interface goes down, or the corresponding VLAN or VLAN interface is deleted.
Long static ARP entries are effective or ineffective. Ineffective long static ARP entries cannot be
used for packet forwarding. A long static ARP entry is ineffective when any of the following conditions
exists:
•
The IP address in the entry conflicts with a local IP address.
•
No local interface has an IP address in the same subnet as the IP address in the ARP entry.
If you specify the vlan-id interface-type interface-number argument, follow these
restrictions and guidelines:
•
The interface can be an Ethernet interface or an aggregate interface.
•
The VLAN and VLAN interface must already exist. The specified Ethernet interface must belong
to the specified VLAN.
•
The IP address of the VLAN interface and the IP address specified by the ip-address
argument must be on the same network.
•
A long static ARP entry for a VLAN is deleted if the VLAN or VLAN interface is deleted.
7
Examples
# Configure a long static ARP entry that contains IP address 202.38.10.2, MAC address
00e0-fc01-0000, and output interface GigabitEthernet 1/0/1 in VLAN 10.
<Sysname> system-view
[Sysname] arp static 202.38.10.2 00e0-fc01-0000 10 gigabitethernet 1/0/1
Related commands
display arp
reset arp
arp timer aging
Use arp timer aging to set the aging timer for dynamic ARP entries.
Use undo arp timer aging to restore the default.
Syntax
arp timer aging { aging-minutes | second aging-seconds }
undo arp timer aging
Default
In system view, the aging timer for dynamic ARP entries is 20 minutes.
In interface view, the aging timer for dynamic ARP entries is the aging timer set in system view.
Views
System view
VLAN interface view
Predefined user roles
network-admin
Parameters
aging-minutes: Specifies the aging timer in minutes. The value range for this argument is 1 to
1440.
second aging-seconds: Specifies the aging timer in seconds. The value range for the
aging-seconds argument is 5 to 86400.
Usage guidelines
Each dynamic ARP entry in the ARP table has a limited lifetime, called an aging timer. The aging
timer of a dynamic ARP entry is reset each time the dynamic ARP entry is updated. Dynamic ARP
entries that are not updated before their aging timers expire are deleted from the ARP table.
You can set the aging timer for dynamic ARP entries in system view or in interface view. The aging
timer set in interface view takes precedence over the aging timer set in system view.
Set the aging timer for dynamic ARP entries as needed. For example, when you configure proxy ARP,
set a short aging time so that invalid dynamic ARP entries can be deleted in a timely manner.
Examples
# Set the aging timer for dynamic ARP entries to 10 minutes.
<Sysname> system-view
[Sysname] arp timer aging 10
# Set the aging timer for dynamic ARP entries to 200 seconds.
8
<Sysname> system-view
[Sysname] arp timer aging second 200
# Set the aging timer for dynamic ARP entries to 200 seconds on VLAN-interface 2.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] arp timer aging second 200
Related commands
arp timer aging probe-count
arp timer aging probe-interval
display arp timer aging
arp timer aging probe-count
Use arp timer aging probe-count to set the maximum number of probes for dynamic ARP
entries.
Use undo arp timer aging probe-count to restore the default.
Syntax
arp timer aging probe-count count
undo arp timer aging probe-count
Default
In system view, the maximum number of probes is three for dynamic ARP entries.
In interface view, the maximum number of probes for dynamic ARP entries is the maximum probe
count set in system view.
Views
System view
VLAN interface view
Predefined user roles
network-admin
Parameters
count: Specifies the maximum number of probes. The value range for this argument is 0 to 10. To
disable the device from probing dynamic ARP entries, set the value to 0.
Usage guidelines
This probe mechanism keeps legal dynamic ARP entries valid and avoids unnecessary ARP
resolution during later traffic forwarding. This probe feature sends ARP requests for the IP address in
a dynamic ARP entry.
•
If the device receives an ARP reply before the entry aging timer expires, the device resets the
aging timer.
•
If the device does not receive any ARP reply after the maximum number of probes is made, the
device deletes the entry when the entry aging timer expires.
You can set the maximum number of probes in system view and in interface view. The probe count
set in interface view takes precedence over the probe count set in system view.
Examples
# Allow the device to perform a maximum of five probes for dynamic ARP entries.
9
<Sysname> system-view
[Sysname] arp timer aging probe-count 5
# Allow the device to perform a maximum of five probes for dynamic ARP entries on VLAN-interface
2.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] arp timer aging probe-count 5
Related commands
arp timer aging
arp timer aging probe-interval
arp timer aging probe-interval
Use arp timer aging probe-interval to set the interval for probing dynamic ARP entries.
Use undo arp timer aging probe-interval to restore the default.
Syntax
arp timer aging probe-interval interval
undo arp timer aging probe-interval
Default
In system view, the probe interval is 5 seconds.
In interface view, the probe interval equals the setting in system view.
Views
System view
VLAN interface view
Predefined user roles
network-admin
Parameters
Interval: Specifies the probe interval in seconds. The value rang is 1 to 60.
Usage guidelines
The probing feature keeps legal dynamic ARP entries valid and avoids unnecessary ARP resolution
during later traffic forwarding.
Before a dynamic ARP entry is aged out, the device sends ARP requests for the IP address in the
ARP entry.
•
If the device receives an ARP reply during the probe interval, the device resets the aging timer.
•
If the device does not receive any ARP reply during the probe interval, the device starts a new
probe.
•
If the maximum number probes are made, and still no ARP reply is received, the device deletes
the entry.
You can set the probe interval in system view and in interface view. The probe interval in interface
view takes precedence over the probe interval in system view.
Examples
# Set the probe interval to 10 seconds for dynamic ARP entries.
10
<Sysname> system-view
[Sysname] arp timer aging probe-interval 10
# Set the probe interval to 10 seconds for dynamic ARP entries on VLAN-interface 2.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] arp timer aging probe-interval 10
Related commands
arp timer aging
arp timer aging probe-count
arp user-ip-conflict record enable
Use arp user-ip-conflict record enable to enable recording user IP address conflicts.
Use undo arp user-ip-conflict record enable to disable recording user IP address
conflicts.
Syntax
arp user-ip-conflict record enable
undo arp user-ip-conflict record enable
Default
If the device starts up with the initial configuration, recording user IP address conflicts is disabled.
If the device starts up with the factory defaults, recording user IP address conflicts is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
This feature enables the device to detect and record user IP address conflicts. The device
determines that a conflict occurs if an incoming non-gratuitous ARP packet has the same sender IP
address as an existing ARP entry but a different sender MAC address. The device generates a user
IP address conflict record, logs the conflict, and sends the log to the information center. For
information about the log destination and output rule configuration, see the information center in
Network Management and Monitoring Configuration Guide.
An IRF member device can generate a maximum of 10 user IP address conflict logs per second.
To display user IP address conflict records, use the display arp user-ip-conflict record
command.
Examples
# Enable recording user IP address conflicts.
<Sysname> system-view
[Sysname] arp user-ip-conflict record enable
Related commands
display arp user-ip-conflict record
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61
  • Page 62 62
  • Page 63 63
  • Page 64 64
  • Page 65 65
  • Page 66 66
  • Page 67 67
  • Page 68 68
  • Page 69 69
  • Page 70 70
  • Page 71 71
  • Page 72 72
  • Page 73 73
  • Page 74 74
  • Page 75 75
  • Page 76 76
  • Page 77 77
  • Page 78 78
  • Page 79 79
  • Page 80 80
  • Page 81 81
  • Page 82 82
  • Page 83 83
  • Page 84 84
  • Page 85 85
  • Page 86 86
  • Page 87 87
  • Page 88 88
  • Page 89 89
  • Page 90 90
  • Page 91 91
  • Page 92 92
  • Page 93 93
  • Page 94 94
  • Page 95 95
  • Page 96 96
  • Page 97 97
  • Page 98 98
  • Page 99 99
  • Page 100 100
  • Page 101 101
  • Page 102 102
  • Page 103 103
  • Page 104 104
  • Page 105 105
  • Page 106 106
  • Page 107 107
  • Page 108 108
  • Page 109 109
  • Page 110 110
  • Page 111 111
  • Page 112 112
  • Page 113 113
  • Page 114 114
  • Page 115 115
  • Page 116 116
  • Page 117 117
  • Page 118 118
  • Page 119 119
  • Page 120 120
  • Page 121 121
  • Page 122 122
  • Page 123 123
  • Page 124 124
  • Page 125 125
  • Page 126 126
  • Page 127 127
  • Page 128 128
  • Page 129 129
  • Page 130 130
  • Page 131 131
  • Page 132 132
  • Page 133 133
  • Page 134 134
  • Page 135 135
  • Page 136 136
  • Page 137 137
  • Page 138 138
  • Page 139 139
  • Page 140 140
  • Page 141 141
  • Page 142 142
  • Page 143 143
  • Page 144 144
  • Page 145 145
  • Page 146 146
  • Page 147 147
  • Page 148 148
  • Page 149 149
  • Page 150 150
  • Page 151 151
  • Page 152 152
  • Page 153 153
  • Page 154 154
  • Page 155 155
  • Page 156 156
  • Page 157 157
  • Page 158 158
  • Page 159 159
  • Page 160 160
  • Page 161 161
  • Page 162 162
  • Page 163 163
  • Page 164 164
  • Page 165 165
  • Page 166 166
  • Page 167 167
  • Page 168 168
  • Page 169 169
  • Page 170 170
  • Page 171 171
  • Page 172 172
  • Page 173 173
  • Page 174 174
  • Page 175 175
  • Page 176 176
  • Page 177 177
  • Page 178 178
  • Page 179 179
  • Page 180 180
  • Page 181 181
  • Page 182 182
  • Page 183 183
  • Page 184 184
  • Page 185 185
  • Page 186 186
  • Page 187 187
  • Page 188 188
  • Page 189 189
  • Page 190 190
  • Page 191 191
  • Page 192 192
  • Page 193 193
  • Page 194 194
  • Page 195 195
  • Page 196 196
  • Page 197 197
  • Page 198 198
  • Page 199 199
  • Page 200 200
  • Page 201 201
  • Page 202 202
  • Page 203 203
  • Page 204 204
  • Page 205 205
  • Page 206 206
  • Page 207 207
  • Page 208 208
  • Page 209 209
  • Page 210 210
  • Page 211 211
  • Page 212 212
  • Page 213 213
  • Page 214 214
  • Page 215 215
  • Page 216 216
  • Page 217 217
  • Page 218 218
  • Page 219 219
  • Page 220 220
  • Page 221 221
  • Page 222 222
  • Page 223 223
  • Page 224 224
  • Page 225 225
  • Page 226 226
  • Page 227 227
  • Page 228 228
  • Page 229 229
  • Page 230 230
  • Page 231 231
  • Page 232 232
  • Page 233 233
  • Page 234 234
  • Page 235 235
  • Page 236 236
  • Page 237 237
  • Page 238 238
  • Page 239 239
  • Page 240 240
  • Page 241 241
  • Page 242 242
  • Page 243 243
  • Page 244 244
  • Page 245 245
  • Page 246 246
  • Page 247 247
  • Page 248 248
  • Page 249 249
  • Page 250 250
  • Page 251 251
  • Page 252 252
  • Page 253 253
  • Page 254 254
  • Page 255 255
  • Page 256 256
  • Page 257 257
  • Page 258 258
  • Page 259 259
  • Page 260 260
  • Page 261 261
  • Page 262 262
  • Page 263 263
  • Page 264 264
  • Page 265 265
  • Page 266 266
  • Page 267 267
  • Page 268 268
  • Page 269 269
  • Page 270 270
  • Page 271 271
  • Page 272 272
  • Page 273 273
  • Page 274 274
  • Page 275 275
  • Page 276 276
  • Page 277 277
  • Page 278 278
  • Page 279 279
  • Page 280 280
  • Page 281 281
  • Page 282 282
  • Page 283 283
  • Page 284 284
  • Page 285 285
  • Page 286 286
  • Page 287 287
  • Page 288 288
  • Page 289 289
  • Page 290 290
  • Page 291 291
  • Page 292 292
  • Page 293 293
  • Page 294 294
  • Page 295 295
  • Page 296 296
  • Page 297 297
  • Page 298 298
  • Page 299 299
  • Page 300 300
  • Page 301 301
  • Page 302 302
  • Page 303 303
  • Page 304 304
  • Page 305 305
  • Page 306 306
  • Page 307 307
  • Page 308 308
  • Page 309 309
  • Page 310 310
  • Page 311 311
  • Page 312 312
  • Page 313 313
  • Page 314 314
  • Page 315 315
  • Page 316 316
  • Page 317 317
  • Page 318 318
  • Page 319 319
  • Page 320 320
  • Page 321 321
  • Page 322 322
  • Page 323 323
  • Page 324 324
  • Page 325 325
  • Page 326 326
  • Page 327 327
  • Page 328 328
  • Page 329 329
  • Page 330 330
  • Page 331 331
  • Page 332 332
  • Page 333 333
  • Page 334 334
  • Page 335 335
  • Page 336 336
  • Page 337 337
  • Page 338 338
  • Page 339 339
  • Page 340 340
  • Page 341 341
  • Page 342 342
  • Page 343 343
  • Page 344 344
  • Page 345 345
  • Page 346 346
  • Page 347 347
  • Page 348 348
  • Page 349 349
  • Page 350 350
  • Page 351 351
  • Page 352 352
  • Page 353 353
  • Page 354 354
  • Page 355 355
  • Page 356 356
  • Page 357 357
  • Page 358 358
  • Page 359 359
  • Page 360 360
  • Page 361 361
  • Page 362 362
  • Page 363 363
  • Page 364 364
  • Page 365 365
  • Page 366 366
  • Page 367 367
  • Page 368 368
  • Page 369 369
  • Page 370 370
  • Page 371 371
  • Page 372 372
  • Page 373 373
  • Page 374 374
  • Page 375 375
  • Page 376 376
  • Page 377 377
  • Page 378 378
  • Page 379 379
  • Page 380 380
  • Page 381 381
  • Page 382 382
  • Page 383 383
  • Page 384 384
  • Page 385 385
  • Page 386 386
  • Page 387 387
  • Page 388 388
  • Page 389 389
  • Page 390 390
  • Page 391 391
  • Page 392 392
  • Page 393 393
  • Page 394 394
  • Page 395 395
  • Page 396 396
  • Page 397 397
  • Page 398 398
  • Page 399 399
  • Page 400 400
  • Page 401 401
  • Page 402 402

Aruba JE072A User guide

Category
Software
Type
User guide

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI