Aruba JH684A Configuration Guide

HPE FlexFabric 5940 Switch Series

Layer 3—IP Services Configuration Guide

Software version: Release 671x and later

Document version: 6W100-20230822

The information contained herein is subject to change without notice. The only warranties for Hewlett Packard

Enterprise products and services are set forth in the express warranty statements accompanying such

products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett

Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.

Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard

Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise

website.

Acknowledgments

Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the

United States and other countries.

Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the

United States and/or other countries.

Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.

Java and Oracle are registered trademarks of Oracle and/or its affiliates.

UNIX® is a registered trademark of The Open Group.

i

Contents

Configuring ARP ···························································································· 1

About ARP ························································································································································· 1

ARP message format ································································································································· 1

ARP operating mechanism ························································································································ 1

ARP entry types ········································································································································· 2

ARP tasks at a glance ········································································································································ 3

Configuring a static ARP entry ··························································································································· 4

Configuring a short static ARP entry ·········································································································· 4

Configuring a long static ARP entry ··········································································································· 4

Configuring a multiport ARP entry ·············································································································· 5

Configuring features for dynamic ARP entries ··································································································· 6

Setting the dynamic ARP learning limit for a device ·················································································· 6

Setting the dynamic ARP learning limit for an interface ············································································· 6

Setting the aging timer for dynamic ARP entries ······················································································· 7

Setting the maximum number of probes for dynamic ARP entries ···························································· 7

Setting the interval for probing dynamic ARP entries ················································································· 8

Enabling dynamic ARP entry check ··········································································································· 8

Synchronizing ARP entries across all member devices ····················································································· 9

Configuring a customer-side or network-side port ····························································································· 9

Enabling recording user IP address conflicts ··································································································· 10

Enabling recording user port migrations ·········································································································· 10

Enabling unknown source MAC-triggered ARP probing ·················································································· 11

Enabling ARP logging ······································································································································ 12

Enabling error logging for ARP entry deployment to hardware ········································································ 12

Display and maintenance commands for ARP ································································································ 13

ARP configuration examples ···························································································································· 13

Example: Configuring a long static ARP entry ························································································· 13

Example: Configuring a short static ARP entry ························································································ 14

Example: Configuring a multiport ARP entry ···························································································· 15

Configuring gratuitous ARP ········································································· 18

About gratuitous ARP······································································································································· 18

IP conflict detection ·································································································································· 18

Gratuitous ARP packet learning ··············································································································· 18

Periodic sending of gratuitous ARP packets ···························································································· 18

Gratuitous ARP tasks at a glance ···················································································································· 19

Enabling IP conflict notification ························································································································ 19

Enabling gratuitous ARP packet learning········································································································· 20

Enabling periodic sending of gratuitous ARP packets ····················································································· 20

Enabling sending gratuitous ARP packets for ARP requests with sender IP address on a different subnet ··· 20

Configuring gratuitous ARP packet retransmission for the device MAC address change ······························· 21

Configuring proxy ARP ················································································ 22

About proxy ARP·············································································································································· 22

Enabling common proxy ARP ·························································································································· 22

Enabling local proxy ARP································································································································· 22

Display and maintenance commands for proxy ARP ······················································································· 23

Common proxy ARP configuration example ···································································································· 23

Example: Configuring common proxy ARP ······························································································ 23

Configuring ARP snooping ··········································································· 25

About ARP snooping ········································································································································ 25

Creation of ARP snooping entries ············································································································ 25

Aging of ARP snooping entries ················································································································ 25

Protection for ARP snooping ···················································································································· 25

Enabling ARP snooping for a VLAN ················································································································ 25

Enabling ARP snooping for a VSI ···················································································································· 25

ii

Display and maintenance commands for ARP snooping ················································································· 26

Configuring ARP fast-reply ·········································································· 27

About ARP fast-reply········································································································································ 27

Enabling ARP fast-reply ··································································································································· 27

ARP fast-reply configuration example ·············································································································· 28

Example: Configuring ARP fast-reply······································································································· 28

Configuring ARP direct route advertisement ················································ 29

About ARP direct route advertisement ············································································································· 29

Mechanism of ARP direct route advertisement ························································································ 29

Application in Layer 3 access networks ··································································································· 29

Enabling ARP direct route advertisement ········································································································ 29

Display and maintenance commands for ARP direct route advertisement ······················································ 29

Configuring dropping ARP requests that match FIB entries ························· 31

About dropping ARP requests that match FIB entries ····················································································· 31

Enabling dropping ARP requests that match FIB entries ················································································· 31

Configuring ARP ping ·················································································· 32

Configuring ARP ping for IPv4 addresses········································································································ 32

Configuring ARP ping for MAC addresses ······································································································· 32

Configuring IP addressing ············································································ 33

About IP addressing ········································································································································· 33

IP address representation and classes ···································································································· 33

Special IP addresses ······························································································································· 34

Subnetting and masking ··························································································································· 34

IP address assignment ····························································································································· 34

Assigning an IP address to an interface ·········································································································· 35

Configuring IP unnumbered ····························································································································· 36

Display and maintenance commands for IP addressing ·················································································· 36

IP addressing configuration examples ············································································································· 37

Example: Manually specifying an IP address··························································································· 37

DHCP overview ··························································································· 39

DHCP network model······································································································································· 39

DHCP address allocation ································································································································· 39

Allocation mechanisms ···························································································································· 39

IP address allocation process ·················································································································· 40

IP address lease extension ······················································································································ 40

DHCP message format ···································································································································· 41

DHCP options ·················································································································································· 42

Common DHCP options ··································································································································· 42

Custom DHCP options ····································································································································· 42

Vendor-specific option (Option 43) ··········································································································· 43

Relay agent option (Option 82) ················································································································ 44

Option 184 ················································································································································ 45

Protocols and standards ·································································································································· 45

Configuring the DHCP server ······································································ 46

About DHCP server·········································································································································· 46

DHCP address assignment mechanisms ································································································· 46

Principles for selecting an address pool ··································································································· 47

IP address allocation sequence ··············································································································· 48

DHCP server tasks at a glance ························································································································ 48

Creating a DHCP user class ···························································································································· 49

Configuring an address pool on the DHCP server ··························································································· 49

DHCP address pool tasks at a glance ····································································································· 49

Creating a DHCP address pool ················································································································ 50

Specifying a primary subnet and multiple address ranges in a DHCP address pool ······························· 50

Specifying a primary subnet and multiple secondary subnets in a DHCP address pool·························· 51

iii

Configuring a static binding in a DHCP address pool ·············································································· 52

Specifying gateways for DHCP clients ····································································································· 53

Specifying a domain name suffix for DHCP clients ·················································································· 54

Specifying DNS servers for DHCP clients ································································································ 54

Specifying WINS servers and NetBIOS node type for DHCP clients ······················································· 54

Specifying BIMS server for DHCP clients ································································································ 55

Specifying the configuration file for DHCP client automatic configuration ··············································· 55

Specifying a server for DHCP clients ······································································································· 56

Configuring Option 184 parameters for DHCP clients ············································································· 57

Customizing DHCP options ······················································································································ 57

Applying a DHCP address pool to a VPN instance ·················································································· 59

Configuring the DHCP user class whitelist ······························································································· 59

Applying an address pool to an interface ········································································································· 60

Configuring a DHCP policy for dynamic assignment ······················································································· 60

Enabling DHCP ················································································································································ 61

Enabling the DHCP server on an interface ······································································································ 62

Configuring IP address conflict detection ········································································································· 62

Enabling handling of Option 82 ························································································································ 62

Configuring the DHCP server security features ······························································································· 63

Restrictions and guidelines ······················································································································ 63

Configuring DHCP flood attack protection ······························································································· 63

Configuring DHCP starvation attack protection ························································································ 64

Configuring DHCP server compatibility ············································································································ 64

Configuring the DHCP server to always broadcast responses ································································ 64

Enabling the DHCP server to return a DHCP-NAK message upon client notions of incorrect IP addresses

································································································································································· 65

Configuring the DHCP server to ignore BOOTP requests ······································································· 65

Configuring the DHCP server to send BOOTP responses in RFC 1048 format ······································ 66

Setting the DSCP value for DHCP packets sent by the DHCP server ····························································· 66

Configuring DHCP packet rate limit on a DHCP server interface ···································································· 66

Configuring DHCP binding auto backup ·········································································································· 67

Enabling client offline detection on the DHCP server ······················································································ 67

Configuring SNMP notifications for the DHCP server ······················································································ 68

About SNMP DHCP server notifications ·································································································· 68

Enabling IP exhaustion notifications ········································································································ 68

Enabling IP usage alarm notifications ······································································································ 68

Enabling DHCP logging on the DHCP server ·································································································· 69

Enabling IP exhaustion event logging ·············································································································· 69

Display and maintenance commands for DHCP server ··················································································· 70

DHCP server configuration examples ·············································································································· 71

Example: Configuring static IP address assignment ················································································ 71

Example: Configuring dynamic IP address assignment ··········································································· 72

Example: Configuring DHCP user class ·································································································· 74

Example: Configuring DHCP user class whitelist ····················································································· 76

Example: Configuring primary and secondary subnets ············································································ 77

Example: Customizing DHCP option ······································································································· 78

Troubleshooting DHCP server configuration ··································································································· 80

Failure to obtain a non-conflicting IP address ·························································································· 80

Configuring the DHCP relay agent ······························································· 81

About DHCP relay agent ·································································································································· 81

DHCP relay agent operation ···················································································································· 81

DHCP relay agent support for Option 82 ································································································· 82

DHCP relay agent support for MCE ········································································································· 82

DHCP relay agent tasks at a glance ················································································································ 82

Enabling DHCP ················································································································································ 83

Enabling the DHCP relay agent on an interface ······························································································ 83

Specifying DHCP servers································································································································· 84

Specifying DHCP servers on a relay agent ······························································································ 84

Specifying DHCP servers in a DHCP relay address pool ········································································ 84

Specifying the DHCP server selecting algorithm ····················································································· 85

Specifying a DHCP relay address pool for DHCP clients ················································································ 86

iv

Configuring the DHCP relay agent security features ······················································································· 87

Restrictions and guidelines for DHCP relay agent security feature configuration ···································· 87

Enabling the DHCP relay agent to record relay entries ··········································································· 88

Enabling periodic refresh of dynamic relay entries ·················································································· 88

Configuring DHCP flood attack protection ······························································································· 89

Enabling DHCP starvation attack protection ···························································································· 89

Enabling DHCP server proxy on the DHCP relay agent ·········································································· 90

Enabling client offline detection on the DHCP relay agent······································································· 90

Configuring the DHCP relay agent to release an IP address ··········································································· 91

Disabling release notification ··························································································································· 91

Configuring DHCP relay agent support for Option 82 ······················································································ 92

Enabling Option 60 insertion into DHCP requests ··························································································· 93

Setting the DSCP value for DHCP packets sent by the DHCP relay agent ····················································· 94

Configuring DHCP packet rate limit on a DHCP relay interface ······································································ 94

Specifying the DHCP relay agent address for the giaddr field ········································································ 94

Manually specifying the DHCP relay agent address for the giaddr field ················································· 94

Configuring smart relay to specify the DHCP relay agent address for the giaddr field ··························· 95

Specifying the source IP address for relayed DHCP requests········································································· 95

Discarding DHCP requests that are delivered from VXLAN tunnels ································································ 96

Configuring support for forwarding DHCP replies based on MAC address table············································· 96

Display and maintenance commands for DHCP relay agent ··········································································· 97

DHCP relay agent configuration examples ······································································································ 98

Example: Configuring basic DHCP relay agent ······················································································· 98

Example: Configuring Option 82 ·············································································································· 99

Example: Configuring DHCP server selection ························································································· 99

Troubleshooting DHCP relay agent configuration ·························································································· 101

Failure of DHCP clients to obtain configuration parameters through the DHCP relay agent ················· 101

Configuring the DHCP client ······································································ 102

About DHCP client ········································································································································· 102

Restrictions and guidelines: DHCP client configuration ················································································· 102

DHCP client tasks at a glance························································································································ 102

Enabling the DHCP client on an interface ······································································································ 102

Configuring a DHCP client ID for an interface································································································ 103

Enabling duplicated address detection ·········································································································· 103

Setting the DSCP value for DHCP packets sent by the DHCP client ···························································· 104

Display and maintenance commands for DHCP client ·················································································· 104

DHCP client configuration examples·············································································································· 104

Example: Configuring DHCP client ········································································································ 104

Configuring DHCP snooping ······································································ 107

About DHCP snooping ··································································································································· 107

Application of trusted and untrusted ports······························································································ 107

DHCP snooping support for Option 82 ··································································································· 108

DHCP snooping on a DRNI network ······································································································ 109

Restrictions and guidelines: DHCP snooping configuration ··········································································· 110

DHCP snooping tasks at a glance ················································································································· 111

Configuring basic DHCP snooping features ·································································································· 111

Configuring basic DHCP snooping features in a common network ······················································· 111

Configuring basic DHCP snooping features in a VXLAN network ························································· 112

Configuring DHCP snooping support for Option 82 ······················································································· 114

Configuring DHCP snooping entry auto backup ···························································································· 115

Setting the maximum number of DHCP snooping entries ············································································· 115

Configuring DHCP packet rate limit ··············································································································· 116

Configuring DHCP snooping security features ······························································································ 116

Enabling DHCP starvation attack protection ·························································································· 116

Enabling DHCP-REQUEST attack protection ························································································ 117

Configuring a DHCP packet blocking port······························································································ 117

Enabling recording untrusted DHCP servers ································································································· 118

Enabling the giaddr field check in DHCP requests ························································································ 118

Enabling client offline detection on the DHCP snooping device ···································································· 119

Enabling DHCP snooping logging ·················································································································· 119

v

Enabling DHCP snooping alarm notifications ································································································ 120

About this task ········································································································································ 120

Enabling the binding-exhaust alarm ······································································································· 120

Enabling the binding-threshold alarm····································································································· 120

Enabling the binding-mismatch alarm or the chaddr-mismatch alarm ··················································· 121

Configuring packet drop alarm ······················································································································· 121

Disabling DHCP snooping on an interface ····································································································· 122

Display and maintenance commands for DHCP snooping ············································································ 122

DHCP snooping configuration examples ······································································································· 124

Example: Configuring basic DHCP snooping features globally ····························································· 124

Example: Configuring basic DHCP snooping features for a VLAN ························································ 125

Example: Configuring DHCP snooping support for Option 82 ······························································· 126

Configuring the BOOTP client ···································································· 128

About BOOTP client ······································································································································· 128

BOOTP client application ······················································································································· 128

Obtaining an IP address dynamically ····································································································· 128

Protocols and standards ························································································································ 128

Configuring an interface to use BOOTP for IP address acquisition ······························································· 128

Display and maintenance commands for BOOTP client ················································································ 129

BOOTP client configuration examples ··········································································································· 129

Example: Configuring BOOTP client ······································································································ 129

Configuring DNS ························································································ 131

About DNS ····················································································································································· 131

Types of DNS services ··························································································································· 131

Static domain name resolution ··············································································································· 131

Dynamic domain name resolution ·········································································································· 131

DNS proxy ·············································································································································· 132

DNS spoofing ········································································································································· 133

DNS tasks at a glance···································································································································· 134

Configuring the DNS client ····························································································································· 134

About this task ········································································································································ 134

Configuring static domain name resolution ···························································································· 135

Configuring dynamic domain name resolution ······················································································· 135

Configuring the DNS proxy ···························································································································· 136

Configuring DNS spoofing······························································································································ 137

Specifying the source interface for DNS packets ··························································································· 137

Configuring the DNS trusted interface ··········································································································· 138

Setting the DSCP value for outgoing DNS packets ······················································································· 138

Display and maintenance commands for DNS ······························································································ 139

IPv4 DNS configuration examples ················································································································· 139

Example: Configuring static domain name resolution ············································································ 139

Example: Configuring dynamic domain name resolution ······································································· 140

Example: Configuring DNS proxy ·········································································································· 142

IPv6 DNS configuration examples ················································································································· 144

Example: Configuring static domain name resolution ············································································ 144

Example: Configuring dynamic domain name resolution ······································································· 144

Example: Configuring DNS proxy ·········································································································· 147

Troubleshooting DNS configuration ··············································································································· 148

Failure to resolve IPv4 addresses ·········································································································· 148

Failure to resolve IPv6 addresses ·········································································································· 149

Configuring DDNS ····················································································· 150

About DDNS··················································································································································· 150

Restrictions and guidelines: DDNS configuration ·························································································· 150

DDNS client tasks at a glance························································································································ 151

Configuring a DDNS policy ···························································································································· 151

Applying the DDNS policy to an interface ······································································································ 153

Setting the DSCP value for outgoing DDNS packets ····················································································· 154

Display and maintenance commands for DDNS ···························································································· 154

DDNS configuration examples ······················································································································· 154

vi

Example: Configuring DDNS with www.3322.org ·················································································· 154

Example: Configuring DDNS with PeanutHull server ············································································· 156

Configuring IP forwarding basic settings ···················································· 158

About FIB table ·············································································································································· 158

Saving the IP forwarding entries to a file········································································································ 159

Enabling split horizon forwarding ··················································································································· 159

Forwarding specific packets received from VXLAN tunnels in hardware ······················································· 159

Enabling SNMP notifications for FIB events ·································································································· 160

Display and maintenance commands for FIB table ······················································································· 160

Configuring load sharing ············································································ 161

About load sharing ········································································································································· 161

Configuring load sharing mode ······················································································································ 161

Enabling local-first load sharing ····················································································································· 161

Enabling symmetric load sharing ··················································································································· 162

Display and maintenance commands for load sharing ·················································································· 162

Loading sharing configuration examples ······································································································· 162

Example: Configuring load sharing based on source and destination addresses·································· 162

Configuring fast forwarding ········································································ 165

About fast forwarding ····································································································································· 165

Restrictions and guidelines: Fast forwarding configuration ············································································ 165

Configuring the aging time for software fast forwarding entries ····································································· 165

Configuring fast forwarding load sharing for software ···················································································· 165

Display and maintenance commands for fast forwarding ·············································································· 166

Displaying the adjacency table ·································································· 167

About the adjacency table ······························································································································ 167

Display and maintenance commands for adjacency table ············································································· 167

Configuring IRDP ······················································································· 168

About IRDP ···················································································································································· 168

IRDP operation ······································································································································· 168

Protocols and standards ························································································································ 168

IRDP tasks at a glance··································································································································· 168

Restrictions and guidelines: IRDP configuration ···························································································· 168

Enabling IRDP················································································································································ 169

Specifying the preference of advertised IP addresses ··················································································· 169

Setting the lifetime of advertised IP addresses ······························································································ 169

Setting the advertising intervals ····················································································································· 170

Specifying the multicast address as the destination address for RAs···························································· 170

Specifying a proxy-advertised IP address ······································································································ 171

IRDP configuration examples ························································································································ 171

Example: Configuring IRDP ··················································································································· 171

Optimizing IP performance ········································································ 174

IP performance optimization tasks at a glance ······························································································ 174

Enabling an interface to forward directed broadcasts destined for the directly connected network ·············· 174

About forwarding broadcasts destined for the directly connected network ············································ 174

Procedure ··············································································································································· 175

Example: Enabling an interface to forward directed broadcasts destined for the directly connected network

······························································································································································· 175

Setting the interface MTU for IPv4 packets···································································································· 176

Enabling IPv4 local fragment reassembly ······································································································ 176

Enabling sending ICMP error messages ······································································································· 176

About sending ICMP error messages ···································································································· 176

Enabling sending ICMP redirect messages ··························································································· 177

Enabling sending ICMP time exceeded messages ················································································ 177

Enable sending ICMP destination unreachable messages ···································································· 177

Configuring rate limit for ICMP error messages ····························································································· 178

Disabling forwarding ICMP fragments ··········································································································· 179

vii

Specifying the source address for ICMP packets ·························································································· 179

Disabling response to broadcast echo requests ···························································································· 180

Disabling sending a specific type of ICMP messages···················································································· 180

Disabling receiving a specific type of ICMP messages ·················································································· 181

Setting TCP MSS for an interface ·················································································································· 181

Configuring TCP path MTU discovery············································································································ 182

Enabling SYN Cookie····································································································································· 182

Setting the TCP buffer size ···························································································································· 183

Setting TCP timers ········································································································································· 183

Enabling the Timestamps option encapsulation in outgoing TCP packets ···················································· 184

Enabling SNMP notifications for TCP events ································································································· 184

Display and maintenance commands for IP performance optimization ························································· 184

Configuring UDP helper ············································································· 186

About UDP helper ·········································································································································· 186

Configuring UDP helper to convert broadcast to unicast ··············································································· 186

Configuring UDP helper to convert broadcast to multicast ············································································ 187

Display and maintenance commands for UDP helper ··················································································· 187

UDP helper configuration examples··············································································································· 188

Example: Configuring UDP helper to convert broadcast to unicast ······················································· 188

Example: Configuring UDP helper to convert broadcast to multicast ···················································· 189

Configuring basic IPv6 settings ·································································· 191

About IPv6······················································································································································ 191

IPv6 features ·········································································································································· 191

IPv6 addresses ······································································································································ 192

IPv6 path MTU discovery ······················································································································· 194

IPv6 transition technologies ··················································································································· 195

Protocols and standards ························································································································ 196

IPv6 basics tasks at a glance ························································································································· 196

Configuring an IPv6 global unicast address ··································································································· 197

About IPv6 global unicast address ········································································································· 197

Restrictions and guidelines ···················································································································· 197

Generating an EUI-64 IPv6 address ······································································································ 197

Manually assigning an IPv6 global unicast address··············································································· 197

Stateless address autoconfiguration ······································································································ 198

Configuring prefix-specific address autoconfiguration ··········································································· 199

Configuring an IPv6 link-local address ··········································································································· 199

About IPv6 link-local address ················································································································· 199

Restrictions and guidelines ···················································································································· 200

Configuring automatic generation of an IPv6 link-local address for an interface ··································· 200

Manually assigning an IPv6 link-local address to an interface ······························································· 200

Configuring an IPv6 anycast address ············································································································ 201

Configuring path MTU discovery ···················································································································· 201

Setting the interface MTU for IPv6 packets ···························································································· 201

Setting a static path MTU for an IPv6 address ······················································································· 201

Setting the aging time for dynamic path MTUs ······················································································ 202

Controlling sending ICMPv6 messages ········································································································· 202

Configuring the rate limit for ICMPv6 error messages ··········································································· 202

Enabling replying to multicast echo requests ························································································· 203

Enabling sending ICMPv6 destination unreachable messages ····························································· 203

Enabling sending ICMPv6 time exceeded messages ············································································ 203

Enabling sending ICMPv6 redirect messages ······················································································· 204

Specifying the source address for unsolicited ICMPv6 packets ····························································· 204

Specifying the source IPv6 address for outgoing ICMPv6 replies ························································· 205

Enabling Layer 3 packet statistics collection ·································································································· 205

Enabling IPv6 local fragment reassembly ······································································································ 206

Enabling discarding IPv6 packets that contain extension headers ································································ 206

Display and maintenance commands for IPv6 basics ··················································································· 206

Basic IPv6 settings configuration examples ··································································································· 207

Example: Configuring basic IPv6 settings ······························································································ 207

viii

Configuring IPv6 neighbor discovery ························································· 213

About IPv6 neighbor discovery ······················································································································ 213

ICMPv6 messages used by IPv6 neighbor discovery ············································································ 213

Address resolution ································································································································· 213

Neighbor reachability detection ·············································································································· 214

Duplicate address detection ··················································································································· 214

Router/prefix discovery and stateless address autoconfiguration ·························································· 215

Redirection ············································································································································· 215

Protocols and standards ························································································································ 215

IPv6 neighbor discovery tasks at a glance ····································································································· 215

Configuring a static neighbor entry ················································································································ 216

Setting the dynamic neighbor learning limit ··································································································· 217

Enabling unsolicited NA learning ··················································································································· 218

Setting the aging timer for ND entries in stale state ······················································································· 218

Setting ND entry probing parameters············································································································· 219

Minimizing link-local ND entries ····················································································································· 220

Setting the hop limit········································································································································ 220

Configuring RA message sending and parameters ······················································································· 220

About RA message parameters ············································································································· 220

Restrictions and guidelines ···················································································································· 221

Enabling the sending of RA messages ·································································································· 221

Configuring parameters for RA messages ····························································································· 222

Specifying DNS server information in RA messages ············································································· 223

Specifying DNS suffix information in RA messages ··············································································· 224

Suppressing advertising DNS information in RA messages ·································································· 224

Setting the maximum number of attempts to send an NS message for DAD ················································ 225

Enabling duplicate detection for duplicate addresses ···················································································· 226

Configuring ND snooping in a VLAN ·············································································································· 226

About ND snooping in a VLAN ··············································································································· 226

Enabling ND snooping ··························································································································· 227

Setting the ND snooping entry learning limit ·························································································· 228

Configuring ND snooping entry related parameters ··············································································· 228

Configuring ND snooping in a VXLAN ··········································································································· 229

About ND snooping in a VXLAN ············································································································ 229

Procedure ··············································································································································· 229

Enabling ND proxy ········································································································································· 229

About ND proxy ······································································································································ 229

Enabling common ND proxy ·················································································································· 230

Enabling local ND proxy ························································································································· 231

Configuring IPv6 ND direct route advertisement ···························································································· 231

About IPv6 ND direct route advertisement ····························································································· 231

Application in Layer 3 access networks ································································································· 231

Procedure ··············································································································································· 231

Enabling recording user IPv6 address conflicts ····························································································· 232

Enabling recording user port migrations ········································································································ 232

Enabling ND logging for user online and offline events ················································································· 233

Logging ND entry deployment events ············································································································ 233

Dropping NS packets that match the FIB table by destination address ························································· 234

Performing ND-ping ······································································································································· 234

Using ND-ping to verify the availability of an IPv6 address ···································································· 234

Using ND-Ping to obtain the IPv6 address for a MAC address ······························································ 235

Display and maintenance commands for IPv6 ND ························································································ 235

IPv6 ND configuration examples ···················································································································· 236

Example: Configuring ND snooping ······································································································· 236

DHCPv6 overview······················································································ 239

DHCPv6 address/prefix assignment ·············································································································· 239

Rapid assignment involving two messages ··························································································· 239

Assignment involving four messages ····································································································· 239

Address/prefix lease renewal ························································································································· 240

Stateless DHCPv6 ········································································································································· 241

ix

DHCPv6 options············································································································································· 241

Option 18 ················································································································································ 241

Option 37 ················································································································································ 242

Option 79 ················································································································································ 243

Protocols and standards ································································································································ 243

Configuring the DHCPv6 server ································································· 244

About DHCPv6 server ···································································································································· 244

IPv6 address assignment ······················································································································· 244

IPv6 prefix assignment ··························································································································· 244

Concepts ················································································································································ 245

DHCPv6 address pool ···························································································································· 245

IPv6 address/prefix allocation sequence ································································································ 246

DHCPv6 server tasks at a glance ·················································································································· 247

Configuring IPv6 prefix assignment ··············································································································· 247

Configuring IPv6 address assignment ··········································································································· 249

Configuring network parameters assignment ································································································ 250

About network parameters assignment·································································································· 250

Configuring network parameters in a DHCPv6 address pool································································· 251

Configuring network parameters in a DHCPv6 option group ································································· 251

Configuring the DHCPv6 server on an interface ···························································································· 252

Configuring a DHCPv6 policy for IPv6 address and prefix assignment ························································· 253

Setting the DSCP value for DHCPv6 packets sent by the DHCPv6 server ··················································· 254

Configuring DHCPv6 binding auto backup····································································································· 254

Advertising subnets assigned to clients ········································································································· 255

Enabling the DHCPv6 server to advertise IPv6 prefixes ················································································ 256

Configuring DHCPv6 vendor-specific options ································································································ 256

Applying a DHCPv6 address pool to a VPN instance ···················································································· 257

Enabling IPv6 address binding conversion for IP source guard ···································································· 257

Configuring SNMP notifications for the DHCPv6 server ················································································ 258

About SNMP DHCPv6 server notifications ···························································································· 258

Enabling IPv6 resource exhaustion notifications ···················································································· 258

Enabling IPv6 address usage alarm notifications ·················································································· 258

Enabling IPv6 prefix usage alarm notifications ······················································································ 259

Enabling DHCPv6 logging on the DHCPv6 server························································································· 259

Enabling IPv6 resource exhaustion logging ··································································································· 259

Display and maintenance commands for DHCPv6 server ············································································· 260

DHCPv6 server configuration examples ········································································································ 261

Example: Configuring dynamic IPv6 prefix assignment ········································································· 261

Example: Configuring dynamic IPv6 address assignment ····································································· 264

Configuring the DHCPv6 relay agent ························································· 266

About DHCPv6 relay agent ···························································································································· 266

Typical application ·································································································································· 266

DHCPv6 relay agent operating process ································································································· 266

DHCPv6 relay agent tasks at a glance ·········································································································· 267

Enabling the DHCPv6 relay agent on an interface ························································································ 267

Specifying DHCPv6 servers on the relay agent ····························································································· 268

Specifying DHCPv6 server IP addresses ······························································································· 268

Specifying DHCPv6 servers for a DHCPv6 address pool on the DHCPv6 relay agent ························· 268

Specifying a gateway address for DHCPv6 clients ························································································ 269

Setting the DUID entry aging timer for smart relay ························································································ 269

Configuring DHCPv6 smart relay for address acquisition from different IPv6 subnets for a client ················ 270

Setting the DSCP value for DHCPv6 packets sent by the DHCPv6 relay agent ··········································· 271

Specifying a padding mode for the Interface-ID option ·················································································· 271

Configuring the DHCPv6 relay agent to add Option 37 in Relay-forward messages ····································· 272

Enabling the DHCPv6 relay agent to support Option 79 ················································································ 272

Enabling the DHCPv6 relay agent to advertise IPv6 prefixes ········································································ 273

Enabling advertising host routes for assigned IPv6 addresses······································································ 273

Specifying the source IPv6 address for relayed DHCPv6 requests ······························································· 274

Configuring DHCPv6 relay security features·································································································· 274

Enabling the DHCPv6 relay agent to record relay entries······································································ 274

x

Enabling IPv6 release notification ·········································································································· 275

Enabling client offline detection·············································································································· 275

Discarding DHCPv6 requests that are delivered from VXLAN tunnels ·························································· 275

Configuring support for forwarding DHCPv6 replies based on MAC address table ······································· 276

Display and maintenance commands for DHCPv6 relay agent ····································································· 277

DHCPv6 relay agent configuration examples ································································································ 278

Example: Configuring DHCPv6 relay agent ··························································································· 278

Configuring the DHCPv6 client ·································································· 280

About the DHCPv6 client ······························································································································· 280

Restrictions and guidelines: DHCPv6 client configuration ············································································· 280

DHCPv6 client tasks at a glance ···················································································································· 280

Configuring the DHCPv6 client DUID ············································································································ 280

Configuring IPv6 address acquisition ············································································································· 281

Configuring IPv6 prefix acquisition ················································································································· 281

Configuring IPv6 address and prefix acquisition ···························································································· 281

Configuring acquisition of configuration parameters except IP addresses and prefixes ································ 282

Setting the DSCP value for DHCPv6 packets sent by the DHCPv6 client ····················································· 282

Display and maintenance commands for DHCPv6 client ·············································································· 283

DHCPv6 client configuration examples ·········································································································· 283

Example: Configuring IPv6 address acquisition ····················································································· 283

Example: Configuring IPv6 prefix acquisition ························································································· 285

Example: Configuring IPv6 address and prefix acquisition ···································································· 286

Example: Configuring stateless DHCPv6 ······························································································· 288

Configuring DHCPv6 snooping ·································································· 291

About DHCPv6 snooping ······························································································································· 291

Application of trusted and untrusted ports······························································································ 291

DHCPv6 snooping on a DRNI network ·································································································· 292

Restrictions and guidelines: DHCPv6 snooping configuration ······································································· 293

DHCPv6 snooping tasks at a glance·············································································································· 293

Configuring basic DHCPv6 snooping features ······························································································· 294

Configuring basic DHCPv6 snooping features in a common network ···················································· 294

Configuring basic DHCPv6 snooping features in a VXLAN network ······················································ 295

Configuring DHCP snooping support for Option 18 ······················································································· 297

Configuring DHCP snooping support for Option 37 ······················································································· 297

Configuring DHCPv6 snooping entry auto backup························································································· 297

Setting the maximum number of DHCPv6 snooping entries ·········································································· 298

Configuring DHCPv6 packet rate limit············································································································ 298

Configuring DHCPv6 snooping security features ··························································································· 299

Enabling DHCPv6-REQUEST check ····································································································· 299

Configuring a DHCPv6 packet blocking port ·························································································· 300

Enabling LDRA on the DHCPv6 snooping device ························································································· 300

Enabling Relay-Forward packet check··········································································································· 301

Enabling client offline detection on the DHCPv6 snooping device ································································ 301

Enabling DHCPv6 snooping logging and alarm ····························································································· 302

Enabling DHCPv6 snooping logging ······································································································ 302

Configuring packet drop alarm ··············································································································· 302

Disabling DHCPv6 snooping on an interface ································································································· 303

Display and maintenance commands for DHCPv6 snooping ········································································ 303

DHCPv6 snooping configuration examples···································································································· 304

Example: Configuring DHCPv6 snooping globally ················································································· 304

Example: Configuring DHCPv6 snooping for a VLAN ············································································ 305

Configuring DHCPv6 guard ······································································· 307

About DHCPv6 guard····································································································································· 307

DHCPv6 guard operating mechanism ··········································································································· 307

Restrictions and guidelines: DHCPv6 guard configuration ············································································ 308

DHCPv6 guard tasks at a glance ··················································································································· 308

Configuring a DHCPv6 guard policy ·············································································································· 308

Applying a DHCPv6 guard policy to an interface ··························································································· 309

Applying a DHCPv6 guard policy to a VLAN·································································································· 309

xi

Display and maintenance commands for DHCPv6 guard ·············································································· 310

DHCPv6 guard configuration examples ········································································································· 310

Example: Configuring DHCPv6 guard ···································································································· 310

Configuring IPv6 fast forwarding ································································ 312

About IPv6 fast forwarding ····························································································································· 312

Configuring the aging time for IPv6 software fast forwarding entries ····························································· 312

Configuring IPv6 fast forwarding load sharing for software ··········································································· 312

Display and maintenance commands for IPv6 fast forwarding ······································································ 313

Configuring tunneling ················································································· 314

About tunneling ·············································································································································· 314

Supported tunneling technologies ·················································································································· 314

Restrictions and guidelines: Tunnel interface configuration ··········································································· 314

Prerequisites for tunnel configuration············································································································· 314

Configuring a tunnel interface ························································································································ 314

About tunnel interface configuration······································································································· 314

Tunnel interface configuration tasks at a glance ···················································································· 315

Creating a tunnel interface ····················································································································· 315

Specifying traffic processing slots for the tunnel interface ····································································· 316

Restoring the default settings of the tunnel interface ············································································· 316

Adding TUNNEL to the PHY_UPDOWN log mnemonic for tunnel interfaces ········································ 317

Assigning a VXLAN tunnel interface to a VXLAN tunnel group ····························································· 317

Enabling SNMP notifications for the tunneling module ·········································································· 318

Display and maintenance commands for tunnel interface configuration ························································ 318

Troubleshooting tunnel interface configuration ······························································································ 319

Tunnel interface not up ·························································································································· 319

IPv6 over IPv4 tunneling ············································································ 320

About IPv6 over IPv4 tunneling ······················································································································ 320

Implementation ······································································································································· 320

Tunnel modes ········································································································································ 320

IPv6 over IPv4 tunneling tasks at a glance ···································································································· 322

Configuring an IPv6 over IPv4 manual tunnel ································································································ 322

Restrictions and guidelines ···················································································································· 322

Procedure ··············································································································································· 322

Example: Configuring an IPv6 over IPv4 manual tunnel ········································································ 323

Configuring a 6to4 tunnel ······························································································································· 325

Restrictions and guidelines ···················································································································· 325

Procedure ··············································································································································· 325

Example: Configuring a 6to4 tunnel ······································································································· 326

Configuring an ISATAP tunnel ······················································································································· 328

Restrictions and guidelines ···················································································································· 328

Procedure ··············································································································································· 328

Example: Configuring an ISATAP tunnel ······························································································· 329

Enabling dropping IPv6 packets that use IPv4-compatible IPv6 addresses ·················································· 330

IPv4 over IPv4 tunneling ············································································ 332

About IPv4 over IPv4 tunneling ······················································································································ 332

Restrictions and guidelines: IPv4 over IPv4 tunnel configuration ·································································· 332

Configuring an IPv4 over IPv4 tunnel ············································································································ 333

IPv4 over IPv4 tunnel configuration examples ······························································································· 333

Example: Configuring an IPv4 over IPv4 tunnel ····················································································· 333

IPv4 over IPv6 tunneling ············································································ 337

About IPv4 over IPv6 tunneling ······················································································································ 337

Implementation ······································································································································· 337

Configuring an IPv4 over IPv6 tunnel ············································································································ 337

Restrictions and guidelines ···················································································································· 337

Procedure ··············································································································································· 338

Example: Configuring an IPv4 over IPv6 tunnel ····················································································· 338

xii

IPv6 over IPv6 tunneling ············································································ 342

About IPv6 over IPv6 tunneling ······················································································································ 342

Restrictions and guidelines: IPv6 over IPv6 tunnel configuration ·································································· 342

IPv6 over IPv6 tunnel configuration tasks at a glance ··················································································· 343

Configuring an IPv6 over IPv6 tunnel ············································································································ 343

Enabling dropping IPv6 packets that use IPv4-compatible IPv6 addresses ·················································· 343

IPv6 over IPv6 tunnel configuration examples ······························································································· 344

Example: Configuring an IPv6 over IPv6 tunnel ····················································································· 344

Configuring GRE ······················································································· 347

About GRE ····················································································································································· 347

GRE encapsulation format ····················································································································· 347

GRE tunnel operating principle ·············································································································· 347

GRE application scenarios ····················································································································· 348

Protocols and standards ························································································································ 349

Restrictions and guidelines: GRE configuration ····························································································· 349

Prerequisites for GRE ···································································································································· 350

Configuring a GRE/IPv4 tunnel ······················································································································ 350

Configuring a GRE/IPv6 tunnel ······················································································································ 351

Enabling dropping IPv6 packets that use IPv4-compatible IPv6 addresses ·················································· 352

Display and maintenance commands for GRE ······························································································ 352

GRE configuration examples ························································································································· 352

Example: Configuring an IPv4 over IPv4 GRE tunnel ············································································ 352

Example: Configuring an IPv4 over IPv6 GRE tunnel ············································································ 355

Troubleshooting GRE····································································································································· 357

Hosts at both ends of a GRE tunnel cannot ping each other ································································· 358

Configuring HTTP redirect ········································································· 359

About HTTP redirect ······································································································································ 359

HTTP redirect tasks at a glance ····················································································································· 359

Specifying the HTTPS redirect listening port number ···················································································· 359

Associating an SSL server policy with the HTTPS redirect service ······························································· 360

Document conventions and icons ······························································ 361

Conventions ··················································································································································· 361

Network topology icons ·································································································································· 362

Support and other resources ····································································· 363

Accessing Hewlett Packard Enterprise Support····························································································· 363

Accessing updates ········································································································································· 363

Websites ················································································································································ 364

Customer self repair ······························································································································· 364

Remote support ······································································································································ 364

Documentation feedback ······················································································································· 364

Index ·········································································································· 366

1

Configuring ARP

About ARP

ARP resolves IP addresses into MAC addresses on Ethernet networks.

ARP message format

ARP uses two types of messages: ARP request and ARP reply. Figure 1 shows the format of ARP

request/reply messages. Numbers in the figure refer to field lengths.

Figure 1 ARP message format

•

Hardware type—Hardware address type. The value 1 represents Ethernet.

•

Protocol type—Type of the protocol address to be mapped. The hexadecimal value 0x0800

represents IP.

•

Hardware address length and protocol address length—Length, in bytes, of a hardware

address and a protocol address. For an Ethernet address, the value of the hardware address

length field is 6. For an IPv4 address, the value of the protocol address length field is 4.

•

OP—Operation code, which describes the type of ARP message. The value 1 represents an

ARP request, and the value 2 represents an ARP reply.

•

Sender hardware address—Hardware address of the device sending the message.

•

Sender protocol address—Protocol address of the device sending the message.

•

Target hardware address—Hardware address of the device to which the message is being

sent.

•

Target protocol address—Protocol address of the device to which the message is being sent.

ARP operating mechanism

As shown in Figure 2, Host A and Host B are on the same subnet. Host A sends a packet to Host B as

follows:

1. Host A looks through the ARP table for an ARP entry for Host B. If one entry is found, Host A

uses the MAC address in the entry to encapsulate the IP packet into a data link layer frame.

Then Host A sends the frame to Host B.

2. If Host A finds no entry for Host B, Host A buffers the packet and broadcasts an ARP request.

The payload of the ARP request contains the following information:

 Sender IP address and sender MAC address—Host A's IP address and MAC address.

 Target IP address—Host B's IP address.

 Target MAC address—An all-zero MAC address.

28-byte ARP request/reply

OP Sender hardware

address Sender protocol

address Target hardware

address Target protocol

address

Protocol

type

22 61 442 61

Hardware address length

Protocol address length

Hardware

type

2

All hosts on this subnet can receive the broadcast request, but only the requested host (Host B)

processes the request.

3. Host B compares its own IP address with the target IP address in the ARP request. If they are

the same, Host B operates as follows:

a. Adds the sender IP address and sender MAC address into its ARP table.

b. Encapsulates its MAC address into an ARP reply.

c. Unicasts the ARP reply to Host A.

4. After receiving the ARP reply, Host A operates as follows:

a. Adds the MAC address of Host B into its ARP table.

b. Encapsulates the MAC address into the packet and sends the packet to Host B.

Figure 2 ARP address resolution process

If Host A and Host B are on different subnets, Host A sends a packet to Host B as follows:

5. Host A broadcasts an ARP request where the target IP address is the IP address of the

gateway.

6. The gateway responds with its MAC address in an ARP reply to Host A.

7. Host A uses the gateway's MAC address to encapsulate the packet, and then sends the packet

to the gateway.

8. If the gateway has an ARP entry for Host B, it forwards the packet to Host B directly. If not, the

gateway broadcasts an ARP request, in which the target IP address is the IP address of Host B.

9. After the gateway gets the MAC address of Host B, it sends the packet to Host B.

ARP entry types

An ARP table stores dynamic ARP entries, OpenFlow ARP entries, Rule ARP entries, and static ARP

entries.

Dynamic ARP entry

ARP automatically creates and updates dynamic entries. A dynamic ARP entry is removed when its

aging timer expires or the output interface goes down. In addition, a dynamic ARP entry can be

overwritten by a static ARP entry.

Static ARP entry

A static ARP entry is manually configured and maintained. It does not age out and cannot be

overwritten by any dynamic ARP entry.

Static ARP entries protect communication between devices because attack packets cannot modify

the IP-to-MAC mapping in a static ARP entry.

The device supports the following types of static ARP entries:

Target IP

address

192.168.1.1

Target IP

address

192.168.1.2

Host A

192.168.1.1

0002-6779-0f4c

Host B

192.168.1.2

00a0-2470-febd

Target MAC

address

0000-0000-0000

Sender MAC

address

00a0-2470-febd

Target MAC

address

0002-6779-0f4c

Sender IP

address

192.168.1.1

Sender MAC

address

0002-6779-0f4c

Sender IP

address

192.168.1.2

3

•

Long static ARP entry—It is directly used for forwarding packets. A long static ARP entry

contains the IP address, MAC address, and one of the following combinations:

 VLAN and output interface.

 Input and output interfaces.

•

Short static ARP entry—It contains only the IP address and MAC address.

If the output interface is a Layer 3 Ethernet interface, the short ARP entry can be directly used to

forward packets.

If the output interface is a VLAN interface, the device sends an ARP request whose target IP

address is the IP address in the short entry. If the sender IP and MAC addresses in the received

ARP reply match the short static ARP entry, the device performs the following operations:

 Adds the interface that received the ARP reply to the short static ARP entry.

 Uses the resolved short static ARP entry to forward IP packets.

•

Multiport ARP entry—It contains the IP address, MAC address, and VLAN/VSI information.

The device can use a multiport ARP entry that has the same MAC address and VLAN/VSI as a

multicast or multiport unicast MAC address entry for packet forwarding. A multiport ARP entry is

manually configured. It does not age out and cannot be overwritten by any dynamic ARP entry.

To communicate with a host by using a fixed IP-to-MAC mapping, configure a short static ARP entry

on the device. To communicate with a host by using a fixed IP-to-MAC mapping through an interface

in a VLAN, configure a long static ARP entry on the device.

OpenFlow ARP entry

ARP creates OpenFlow ARP entries by learning from the OpenFlow module. An OpenFlow ARP

entry does not age out, and it cannot be updated. An OpenFlow ARP entry can be used directly to

forward packets. For more information about OpenFlow, see OpenFlow Configuration Guide.

Rule ARP entry

Rule ARP entries can be directly used for packet forwarding. A Rule ARP entry does not age out, and

it cannot be updated. It can be overwritten by a static ARP entry.

ARP creates Rule ARP entries by learning from the following modules:

•

Portal. For more information about portal, see Security Configuration Guide.

•

VXLAN. For more information about VXLAN, see VXLAN overview in VXLAN Configuration

Guide.

•

OVSDB. For more information about OVSDB, see OVSDB-VTEP configuration in VXLAN

Configuration Guide.

ARP tasks at a glance

All ARP tasks are optional.

•

Configuring a static ARP entry

 Configuring a short static ARP entry

 Configuring a long static ARP entry

 Configuring a multiport ARP entry

•

Configuring features for dynamic ARP entries

 Setting the dynamic ARP learning limit for a device

 Setting the dynamic ARP learning limit for an interface

 Setting the aging timer for dynamic ARP entries

 Setting the maximum number of probes for dynamic ARP entries

 Setting the interval for probing dynamic ARP entries

4

 Enabling dynamic ARP entry check

•

Synchronizing ARP entries across all member devices

•

Configuring a customer-side or network-side port

•

Enabling user information checking for ARP entries:

 Enabling recording user IP address conflicts

 Enabling recording user port migrations

•

Enabling unknown source MAC-triggered ARP probing

•

Enabling ARP logging

•

Enabling error logging for ARP entry deployment to hardware

Configuring a static ARP entry

Static ARP entries are effective when the device functions correctly.

Configuring a short static ARP entry

Restrictions and guidelines

A resolved short static ARP entry becomes unresolved upon certain events, for example, when the

resolved output interface goes down, or the corresponding VLAN or VLAN interface is deleted.

Procedure

1. Enter system view.

system-view

2. Configure a short static ARP entry.

arp static ip-address mac-address [ vpn-instance vpn-instance-name ]

[ description text ]

Configuring a long static ARP entry

About this task

Long static ARP entries can be effective or ineffective. Ineffective long static ARP entries cannot be

used for packet forwarding. A long static ARP entry is ineffective when any of the following conditions

exists:

•

The IP address in the entry conflicts with a local IP address.

•

No local interface has an IP address in the same subnet as the IP address in the ARP entry.

A long static ARP entry for a VLAN is deleted if the VLAN or VLAN interface is deleted.

Procedure

1. Enter system view.

system-view

2. Configure a long static ARP entry.

arp static ip-address mac-address [ vlan-id interface-type

interface-number | vsi-interface vsi-interface-id tunnel number vsi

vsi-name | vsi-interface vsi-interface-id interface-type

interface-number service-instance instance-id vsi vsi-name ]

[ vpn-instance vpn-instance-name ] [ description text ]

5

Configuring a multiport ARP entry

About this task

A multiport ARP entry contains an IP address, MAC address, output interface, and VLAN ID/VSI

information. The VLAN and output interfaces are specified by a multiport unicast MAC address entry

or a multicast MAC address entry. For more information about multiport unicast MAC address entries,

see Layer—2 LAN Switching Configuration Guide. For more information about multicast MAC

address entries, see IGMP snooping configuration in IP Multicast Configuration Guide.

A multiport ARP entry can overwrite a dynamic, short static or long static ARP entry. Conversely, a

short static or long static ARP entry can overwrite a multiport ARP entry.

Restrictions and guidelines

For a multiport ARP entry to be effective for packet forwarding, make sure the following conditions

are met:

•

A multiport unicast MAC address entry or a multicast MAC address entry exists.

•

The multiport ARP entry must have the same MAC address and VLAN/VSI setting as the

multiport unicast MAC address entry or the multicast MAC address entry.

•

The IP address in the multiport ARP entry must reside on the same subnet as the VLAN

interface of the specified VLAN.

When you configure multiport ARP entries in an overlay network, first specify VSI gateway services

for a service loopback group.

Procedure

1. Enter system view.

system-view

2. Configure a multiport unicast MAC address entry or a multicast MAC address entry.

 Configure a multiport unicast MAC address entry in a common network.

mac-address multiport mac-address interface interface-list vlan

vlan-id

 Configure a local multiport unicast MAC address entry in a VXLAN network.

mac-address multiport mac-address { interface { interface-type

interface-number service-instance instance-id }&<1-4> } vsi

vsi-name

 Configure a remote multiport unicast MAC address entry in a VXLAN network.

mac-address multiport mac-address { interface { tunnel

tunnel-number1 [ to tunnel tunnel-number2 ] }&<1-4> } vsi vsi-name

 Configure a multicast MAC address entry in a common network.

mac-address multicast mac-address interface interface-list vlan

vlan-id

 Configure a local static multicast MAC address entry in a VXLAN network.

mac-address multicast mac-address { interface { interface-type

interface-number service-instance instance-id }&<1-4> } vsi

vsi-name

 Configure a remote static multicast MAC address entry in a VXLAN network.

mac-address multicast mac-address { interface { tunnel

tunnel-number1 [ to tunnel tunnel-number2 ] }&<1-4> } vsi vsi-name

3. Configure a multiport ARP entry.

6

arp multiport ip-address mac-address { vlan-id | vsi-interface

vsi-interface-id vsi vsi-name } [ vpn-instance vpn-instance-name ]

[ description text ]

Configuring features for dynamic ARP entries

Setting the dynamic ARP learning limit for a device

About this task

A device can dynamically learn ARP entries. To prevent a device from holding too many ARP entries,

you can set the maximum number of dynamic ARP entries that the device can learn. When the limit

is reached, the device stops ARP learning.

If you set a value lower than the number of existing dynamic ARP entries, the device does not delete

the existing entries unless they age out. You can use the reset arp dynamic command to clear

dynamic ARP entries.

Procedure

1. Enter system view.

system-view

2. Set the dynamic ARP learning limit for the device.

arp max-learning-number max-number slot slot-number

By default, the device can learn a maximum of 163840 dynamic ARP entries.

To disable the device from dynamic ARP learning, set the value to 0.

Setting the dynamic ARP learning limit for an interface

About this task

An interface can dynamically learn ARP entries. To prevent an interface from holding too many ARP

entries, you can set the maximum number of dynamic ARP entries that the interface can learn. When

the limit is reached, the interface stops ARP learning.

You can set limits for both a Layer 2 interface and the VLAN interface for a permitted VLAN on the

Layer 2 interface. The Layer 2 interface learns an ARP entry only when neither limit is reached.

The total dynamic ARP learning limit for all interfaces will not be higher than the dynamic ARP

learning limit for the device.

Procedure

1. Enter system view.

system-view

2. Enter interface view.

interface interface-type interface-number

3. Set the dynamic ARP learning limit for the interface.

arp max-learning-num max-number [ alarm alarm-threshold ]

By default, an interface can learn a maximum of 163840 dynamic ARP entries.

To disable the interface from dynamic ARP learning, set the value to 0.

Page is loading ...

Aruba JH684A Configuration Guide

Aruba JH684A Configuration Guide

Related papers

Other documents