HPE FlexFabric 5940 Switch Series
Layer 3—IP Services Configuration Guide
Software version: Release 671x and later
Document version: 6W100-20230822
© Copyright 2023 Hewlett Packard Enterprise Development LP
The information contained herein is subject to change without notice. The only warranties for Hewlett Packard
Enterprise products and services are set forth in the express warranty statements accompanying such
products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett
Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise
website.
Acknowledgments
Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the
United States and other countries.
Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the
United States and/or other countries.
Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.
Java and Oracle are registered trademarks of Oracle and/or its affiliates.
UNIX® is a registered trademark of The Open Group.
i
Contents
Configuring ARP ···························································································· 1
About ARP ························································································································································· 1
ARP message format ································································································································· 1
ARP operating mechanism ························································································································ 1
ARP entry types ········································································································································· 2
ARP tasks at a glance ········································································································································ 3
Configuring a static ARP entry ··························································································································· 4
Configuring a short static ARP entry ·········································································································· 4
Configuring a long static ARP entry ··········································································································· 4
Configuring a multiport ARP entry ·············································································································· 5
Configuring features for dynamic ARP entries ··································································································· 6
Setting the dynamic ARP learning limit for a device ·················································································· 6
Setting the dynamic ARP learning limit for an interface ············································································· 6
Setting the aging timer for dynamic ARP entries ······················································································· 7
Setting the maximum number of probes for dynamic ARP entries ···························································· 7
Setting the interval for probing dynamic ARP entries ················································································· 8
Enabling dynamic ARP entry check ··········································································································· 8
Synchronizing ARP entries across all member devices ····················································································· 9
Configuring a customer-side or network-side port ····························································································· 9
Enabling recording user IP address conflicts ··································································································· 10
Enabling recording user port migrations ·········································································································· 10
Enabling unknown source MAC-triggered ARP probing ·················································································· 11
Enabling ARP logging ······································································································································ 12
Enabling error logging for ARP entry deployment to hardware ········································································ 12
Display and maintenance commands for ARP ································································································ 13
ARP configuration examples ···························································································································· 13
Example: Configuring a long static ARP entry ························································································· 13
Example: Configuring a short static ARP entry ························································································ 14
Example: Configuring a multiport ARP entry ···························································································· 15
Configuring gratuitous ARP ········································································· 18
About gratuitous ARP······································································································································· 18
IP conflict detection ·································································································································· 18
Gratuitous ARP packet learning ··············································································································· 18
Periodic sending of gratuitous ARP packets ···························································································· 18
Gratuitous ARP tasks at a glance ···················································································································· 19
Enabling IP conflict notification ························································································································ 19
Enabling gratuitous ARP packet learning········································································································· 20
Enabling periodic sending of gratuitous ARP packets ····················································································· 20
Enabling sending gratuitous ARP packets for ARP requests with sender IP address on a different subnet ··· 20
Configuring gratuitous ARP packet retransmission for the device MAC address change ······························· 21
Configuring proxy ARP ················································································ 22
About proxy ARP·············································································································································· 22
Enabling common proxy ARP ·························································································································· 22
Enabling local proxy ARP································································································································· 22
Display and maintenance commands for proxy ARP ······················································································· 23
Common proxy ARP configuration example ···································································································· 23
Example: Configuring common proxy ARP ······························································································ 23
Configuring ARP snooping ··········································································· 25
About ARP snooping ········································································································································ 25
Creation of ARP snooping entries ············································································································ 25
Aging of ARP snooping entries ················································································································ 25
Protection for ARP snooping ···················································································································· 25
Enabling ARP snooping for a VLAN ················································································································ 25
Enabling ARP snooping for a VSI ···················································································································· 25
ii
Display and maintenance commands for ARP snooping ················································································· 26
Configuring ARP fast-reply ·········································································· 27
About ARP fast-reply········································································································································ 27
Enabling ARP fast-reply ··································································································································· 27
ARP fast-reply configuration example ·············································································································· 28
Example: Configuring ARP fast-reply······································································································· 28
Configuring ARP direct route advertisement ················································ 29
About ARP direct route advertisement ············································································································· 29
Mechanism of ARP direct route advertisement ························································································ 29
Application in Layer 3 access networks ··································································································· 29
Enabling ARP direct route advertisement ········································································································ 29
Display and maintenance commands for ARP direct route advertisement ······················································ 29
Configuring dropping ARP requests that match FIB entries ························· 31
About dropping ARP requests that match FIB entries ····················································································· 31
Enabling dropping ARP requests that match FIB entries ················································································· 31
Configuring ARP ping ·················································································· 32
Configuring ARP ping for IPv4 addresses········································································································ 32
Configuring ARP ping for MAC addresses ······································································································· 32
Configuring IP addressing ············································································ 33
About IP addressing ········································································································································· 33
IP address representation and classes ···································································································· 33
Special IP addresses ······························································································································· 34
Subnetting and masking ··························································································································· 34
IP address assignment ····························································································································· 34
Assigning an IP address to an interface ·········································································································· 35
Configuring IP unnumbered ····························································································································· 36
Display and maintenance commands for IP addressing ·················································································· 36
IP addressing configuration examples ············································································································· 37
Example: Manually specifying an IP address··························································································· 37
DHCP overview ··························································································· 39
DHCP network model······································································································································· 39
DHCP address allocation ································································································································· 39
Allocation mechanisms ···························································································································· 39
IP address allocation process ·················································································································· 40
IP address lease extension ······················································································································ 40
DHCP message format ···································································································································· 41
DHCP options ·················································································································································· 42
Common DHCP options ··································································································································· 42
Custom DHCP options ····································································································································· 42
Vendor-specific option (Option 43) ··········································································································· 43
Relay agent option (Option 82) ················································································································ 44
Option 184 ················································································································································ 45
Protocols and standards ·································································································································· 45
Configuring the DHCP server ······································································ 46
About DHCP server·········································································································································· 46
DHCP address assignment mechanisms ································································································· 46
Principles for selecting an address pool ··································································································· 47
IP address allocation sequence ··············································································································· 48
DHCP server tasks at a glance ························································································································ 48
Creating a DHCP user class ···························································································································· 49
Configuring an address pool on the DHCP server ··························································································· 49
DHCP address pool tasks at a glance ····································································································· 49
Creating a DHCP address pool ················································································································ 50
Specifying a primary subnet and multiple address ranges in a DHCP address pool ······························· 50
Specifying a primary subnet and multiple secondary subnets in a DHCP address pool·························· 51
iii
Configuring a static binding in a DHCP address pool ·············································································· 52
Specifying gateways for DHCP clients ····································································································· 53
Specifying a domain name suffix for DHCP clients ·················································································· 54
Specifying DNS servers for DHCP clients ································································································ 54
Specifying WINS servers and NetBIOS node type for DHCP clients ······················································· 54
Specifying BIMS server for DHCP clients ································································································ 55
Specifying the configuration file for DHCP client automatic configuration ··············································· 55
Specifying a server for DHCP clients ······································································································· 56
Configuring Option 184 parameters for DHCP clients ············································································· 57
Customizing DHCP options ······················································································································ 57
Applying a DHCP address pool to a VPN instance ·················································································· 59
Configuring the DHCP user class whitelist ······························································································· 59
Applying an address pool to an interface ········································································································· 60
Configuring a DHCP policy for dynamic assignment ······················································································· 60
Enabling DHCP ················································································································································ 61
Enabling the DHCP server on an interface ······································································································ 62
Configuring IP address conflict detection ········································································································· 62
Enabling handling of Option 82 ························································································································ 62
Configuring the DHCP server security features ······························································································· 63
Restrictions and guidelines ······················································································································ 63
Configuring DHCP flood attack protection ······························································································· 63
Configuring DHCP starvation attack protection ························································································ 64
Configuring DHCP server compatibility ············································································································ 64
Configuring the DHCP server to always broadcast responses ································································ 64
Enabling the DHCP server to return a DHCP-NAK message upon client notions of incorrect IP addresses
································································································································································· 65
Configuring the DHCP server to ignore BOOTP requests ······································································· 65
Configuring the DHCP server to send BOOTP responses in RFC 1048 format ······································ 66
Setting the DSCP value for DHCP packets sent by the DHCP server ····························································· 66
Configuring DHCP packet rate limit on a DHCP server interface ···································································· 66
Configuring DHCP binding auto backup ·········································································································· 67
Enabling client offline detection on the DHCP server ······················································································ 67
Configuring SNMP notifications for the DHCP server ······················································································ 68
About SNMP DHCP server notifications ·································································································· 68
Enabling IP exhaustion notifications ········································································································ 68
Enabling IP usage alarm notifications ······································································································ 68
Enabling DHCP logging on the DHCP server ·································································································· 69
Enabling IP exhaustion event logging ·············································································································· 69
Display and maintenance commands for DHCP server ··················································································· 70
DHCP server configuration examples ·············································································································· 71
Example: Configuring static IP address assignment ················································································ 71
Example: Configuring dynamic IP address assignment ··········································································· 72
Example: Configuring DHCP user class ·································································································· 74
Example: Configuring DHCP user class whitelist ····················································································· 76
Example: Configuring primary and secondary subnets ············································································ 77
Example: Customizing DHCP option ······································································································· 78
Troubleshooting DHCP server configuration ··································································································· 80
Failure to obtain a non-conflicting IP address ·························································································· 80
Configuring the DHCP relay agent ······························································· 81
About DHCP relay agent ·································································································································· 81
DHCP relay agent operation ···················································································································· 81
DHCP relay agent support for Option 82 ································································································· 82
DHCP relay agent support for MCE ········································································································· 82
DHCP relay agent tasks at a glance ················································································································ 82
Enabling DHCP ················································································································································ 83
Enabling the DHCP relay agent on an interface ······························································································ 83
Specifying DHCP servers································································································································· 84
Specifying DHCP servers on a relay agent ······························································································ 84
Specifying DHCP servers in a DHCP relay address pool ········································································ 84
Specifying the DHCP server selecting algorithm ····················································································· 85
Specifying a DHCP relay address pool for DHCP clients ················································································ 86
iv
Configuring the DHCP relay agent security features ······················································································· 87
Restrictions and guidelines for DHCP relay agent security feature configuration ···································· 87
Enabling the DHCP relay agent to record relay entries ··········································································· 88
Enabling periodic refresh of dynamic relay entries ·················································································· 88
Configuring DHCP flood attack protection ······························································································· 89
Enabling DHCP starvation attack protection ···························································································· 89
Enabling DHCP server proxy on the DHCP relay agent ·········································································· 90
Enabling client offline detection on the DHCP relay agent······································································· 90
Configuring the DHCP relay agent to release an IP address ··········································································· 91
Disabling release notification ··························································································································· 91
Configuring DHCP relay agent support for Option 82 ······················································································ 92
Enabling Option 60 insertion into DHCP requests ··························································································· 93
Setting the DSCP value for DHCP packets sent by the DHCP relay agent ····················································· 94
Configuring DHCP packet rate limit on a DHCP relay interface ······································································ 94
Specifying the DHCP relay agent address for the giaddr field ········································································ 94
Manually specifying the DHCP relay agent address for the giaddr field ················································· 94
Configuring smart relay to specify the DHCP relay agent address for the giaddr field ··························· 95
Specifying the source IP address for relayed DHCP requests········································································· 95
Discarding DHCP requests that are delivered from VXLAN tunnels ································································ 96
Configuring support for forwarding DHCP replies based on MAC address table············································· 96
Display and maintenance commands for DHCP relay agent ··········································································· 97
DHCP relay agent configuration examples ······································································································ 98
Example: Configuring basic DHCP relay agent ······················································································· 98
Example: Configuring Option 82 ·············································································································· 99
Example: Configuring DHCP server selection ························································································· 99
Troubleshooting DHCP relay agent configuration ·························································································· 101
Failure of DHCP clients to obtain configuration parameters through the DHCP relay agent ················· 101
Configuring the DHCP client ······································································ 102
About DHCP client ········································································································································· 102
Restrictions and guidelines: DHCP client configuration ················································································· 102
DHCP client tasks at a glance························································································································ 102
Enabling the DHCP client on an interface ······································································································ 102
Configuring a DHCP client ID for an interface································································································ 103
Enabling duplicated address detection ·········································································································· 103
Setting the DSCP value for DHCP packets sent by the DHCP client ···························································· 104
Display and maintenance commands for DHCP client ·················································································· 104
DHCP client configuration examples·············································································································· 104
Example: Configuring DHCP client ········································································································ 104
Configuring DHCP snooping ······································································ 107
About DHCP snooping ··································································································································· 107
Application of trusted and untrusted ports······························································································ 107
DHCP snooping support for Option 82 ··································································································· 108
DHCP snooping on a DRNI network ······································································································ 109
Restrictions and guidelines: DHCP snooping configuration ··········································································· 110
DHCP snooping tasks at a glance ················································································································· 111
Configuring basic DHCP snooping features ·································································································· 111
Configuring basic DHCP snooping features in a common network ······················································· 111
Configuring basic DHCP snooping features in a VXLAN network ························································· 112
Configuring DHCP snooping support for Option 82 ······················································································· 114
Configuring DHCP snooping entry auto backup ···························································································· 115
Setting the maximum number of DHCP snooping entries ············································································· 115
Configuring DHCP packet rate limit ··············································································································· 116
Configuring DHCP snooping security features ······························································································ 116
Enabling DHCP starvation attack protection ·························································································· 116
Enabling DHCP-REQUEST attack protection ························································································ 117
Configuring a DHCP packet blocking port······························································································ 117
Enabling recording untrusted DHCP servers ································································································· 118
Enabling the giaddr field check in DHCP requests ························································································ 118
Enabling client offline detection on the DHCP snooping device ···································································· 119
Enabling DHCP snooping logging ·················································································································· 119
v
Enabling DHCP snooping alarm notifications ································································································ 120
About this task ········································································································································ 120
Enabling the binding-exhaust alarm ······································································································· 120
Enabling the binding-threshold alarm····································································································· 120
Enabling the binding-mismatch alarm or the chaddr-mismatch alarm ··················································· 121
Configuring packet drop alarm ······················································································································· 121
Disabling DHCP snooping on an interface ····································································································· 122
Display and maintenance commands for DHCP snooping ············································································ 122
DHCP snooping configuration examples ······································································································· 124
Example: Configuring basic DHCP snooping features globally ····························································· 124
Example: Configuring basic DHCP snooping features for a VLAN ························································ 125
Example: Configuring DHCP snooping support for Option 82 ······························································· 126
Configuring the BOOTP client ···································································· 128
About BOOTP client ······································································································································· 128
BOOTP client application ······················································································································· 128
Obtaining an IP address dynamically ····································································································· 128
Protocols and standards ························································································································ 128
Configuring an interface to use BOOTP for IP address acquisition ······························································· 128
Display and maintenance commands for BOOTP client ················································································ 129
BOOTP client configuration examples ··········································································································· 129
Example: Configuring BOOTP client ······································································································ 129
Configuring DNS ························································································ 131
About DNS ····················································································································································· 131
Types of DNS services ··························································································································· 131
Static domain name resolution ··············································································································· 131
Dynamic domain name resolution ·········································································································· 131
DNS proxy ·············································································································································· 132
DNS spoofing ········································································································································· 133
DNS tasks at a glance···································································································································· 134
Configuring the DNS client ····························································································································· 134
About this task ········································································································································ 134
Configuring static domain name resolution ···························································································· 135
Configuring dynamic domain name resolution ······················································································· 135
Configuring the DNS proxy ···························································································································· 136
Configuring DNS spoofing······························································································································ 137
Specifying the source interface for DNS packets ··························································································· 137
Configuring the DNS trusted interface ··········································································································· 138
Setting the DSCP value for outgoing DNS packets ······················································································· 138
Display and maintenance commands for DNS ······························································································ 139
IPv4 DNS configuration examples ················································································································· 139
Example: Configuring static domain name resolution ············································································ 139
Example: Configuring dynamic domain name resolution ······································································· 140
Example: Configuring DNS proxy ·········································································································· 142
IPv6 DNS configuration examples ················································································································· 144
Example: Configuring static domain name resolution ············································································ 144
Example: Configuring dynamic domain name resolution ······································································· 144
Example: Configuring DNS proxy ·········································································································· 147
Troubleshooting DNS configuration ··············································································································· 148
Failure to resolve IPv4 addresses ·········································································································· 148
Failure to resolve IPv6 addresses ·········································································································· 149
Configuring DDNS ····················································································· 150
About DDNS··················································································································································· 150
Restrictions and guidelines: DDNS configuration ·························································································· 150
DDNS client tasks at a glance························································································································ 151
Configuring a DDNS policy ···························································································································· 151
Applying the DDNS policy to an interface ······································································································ 153
Setting the DSCP value for outgoing DDNS packets ····················································································· 154
Display and maintenance commands for DDNS ···························································································· 154
DDNS configuration examples ······················································································································· 154
vi
Example: Configuring DDNS with www.3322.org ·················································································· 154
Example: Configuring DDNS with PeanutHull server ············································································· 156
Configuring IP forwarding basic settings ···················································· 158
About FIB table ·············································································································································· 158
Saving the IP forwarding entries to a file········································································································ 159
Enabling split horizon forwarding ··················································································································· 159
Forwarding specific packets received from VXLAN tunnels in hardware ······················································· 159
Enabling SNMP notifications for FIB events ·································································································· 160
Display and maintenance commands for FIB table ······················································································· 160
Configuring load sharing ············································································ 161
About load sharing ········································································································································· 161
Configuring load sharing mode ······················································································································ 161
Enabling local-first load sharing ····················································································································· 161
Enabling symmetric load sharing ··················································································································· 162
Display and maintenance commands for load sharing ·················································································· 162
Loading sharing configuration examples ······································································································· 162
Example: Configuring load sharing based on source and destination addresses·································· 162
Configuring fast forwarding ········································································ 165
About fast forwarding ····································································································································· 165
Restrictions and guidelines: Fast forwarding configuration ············································································ 165
Configuring the aging time for software fast forwarding entries ····································································· 165
Configuring fast forwarding load sharing for software ···················································································· 165
Display and maintenance commands for fast forwarding ·············································································· 166
Displaying the adjacency table ·································································· 167
About the adjacency table ······························································································································ 167
Display and maintenance commands for adjacency table ············································································· 167
Configuring IRDP ······················································································· 168
About IRDP ···················································································································································· 168
IRDP operation ······································································································································· 168
Protocols and standards ························································································································ 168
IRDP tasks at a glance··································································································································· 168
Restrictions and guidelines: IRDP configuration ···························································································· 168
Enabling IRDP················································································································································ 169
Specifying the preference of advertised IP addresses ··················································································· 169
Setting the lifetime of advertised IP addresses ······························································································ 169
Setting the advertising intervals ····················································································································· 170
Specifying the multicast address as the destination address for RAs···························································· 170
Specifying a proxy-advertised IP address ······································································································ 171
IRDP configuration examples ························································································································ 171
Example: Configuring IRDP ··················································································································· 171
Optimizing IP performance ········································································ 174
IP performance optimization tasks at a glance ······························································································ 174
Enabling an interface to forward directed broadcasts destined for the directly connected network ·············· 174
About forwarding broadcasts destined for the directly connected network ············································ 174
Procedure ··············································································································································· 175
Example: Enabling an interface to forward directed broadcasts destined for the directly connected network
······························································································································································· 175
Setting the interface MTU for IPv4 packets···································································································· 176
Enabling IPv4 local fragment reassembly ······································································································ 176
Enabling sending ICMP error messages ······································································································· 176
About sending ICMP error messages ···································································································· 176
Enabling sending ICMP redirect messages ··························································································· 177
Enabling sending ICMP time exceeded messages ················································································ 177
Enable sending ICMP destination unreachable messages ···································································· 177
Configuring rate limit for ICMP error messages ····························································································· 178
Disabling forwarding ICMP fragments ··········································································································· 179
vii
Specifying the source address for ICMP packets ·························································································· 179
Disabling response to broadcast echo requests ···························································································· 180
Disabling sending a specific type of ICMP messages···················································································· 180
Disabling receiving a specific type of ICMP messages ·················································································· 181
Setting TCP MSS for an interface ·················································································································· 181
Configuring TCP path MTU discovery············································································································ 182
Enabling SYN Cookie····································································································································· 182
Setting the TCP buffer size ···························································································································· 183
Setting TCP timers ········································································································································· 183
Enabling the Timestamps option encapsulation in outgoing TCP packets ···················································· 184
Enabling SNMP notifications for TCP events ································································································· 184
Display and maintenance commands for IP performance optimization ························································· 184
Configuring UDP helper ············································································· 186
About UDP helper ·········································································································································· 186
Configuring UDP helper to convert broadcast to unicast ··············································································· 186
Configuring UDP helper to convert broadcast to multicast ············································································ 187
Display and maintenance commands for UDP helper ··················································································· 187
UDP helper configuration examples··············································································································· 188
Example: Configuring UDP helper to convert broadcast to unicast ······················································· 188
Example: Configuring UDP helper to convert broadcast to multicast ···················································· 189
Configuring basic IPv6 settings ·································································· 191
About IPv6······················································································································································ 191
IPv6 features ·········································································································································· 191
IPv6 addresses ······································································································································ 192
IPv6 path MTU discovery ······················································································································· 194
IPv6 transition technologies ··················································································································· 195
Protocols and standards ························································································································ 196
IPv6 basics tasks at a glance ························································································································· 196
Configuring an IPv6 global unicast address ··································································································· 197
About IPv6 global unicast address ········································································································· 197
Restrictions and guidelines ···················································································································· 197
Generating an EUI-64 IPv6 address ······································································································ 197
Manually assigning an IPv6 global unicast address··············································································· 197
Stateless address autoconfiguration ······································································································ 198
Configuring prefix-specific address autoconfiguration ··········································································· 199
Configuring an IPv6 link-local address ··········································································································· 199
About IPv6 link-local address ················································································································· 199
Restrictions and guidelines ···················································································································· 200
Configuring automatic generation of an IPv6 link-local address for an interface ··································· 200
Manually assigning an IPv6 link-local address to an interface ······························································· 200
Configuring an IPv6 anycast address ············································································································ 201
Configuring path MTU discovery ···················································································································· 201
Setting the interface MTU for IPv6 packets ···························································································· 201
Setting a static path MTU for an IPv6 address ······················································································· 201
Setting the aging time for dynamic path MTUs ······················································································ 202
Controlling sending ICMPv6 messages ········································································································· 202
Configuring the rate limit for ICMPv6 error messages ··········································································· 202
Enabling replying to multicast echo requests ························································································· 203
Enabling sending ICMPv6 destination unreachable messages ····························································· 203
Enabling sending ICMPv6 time exceeded messages ············································································ 203
Enabling sending ICMPv6 redirect messages ······················································································· 204
Specifying the source address for unsolicited ICMPv6 packets ····························································· 204
Specifying the source IPv6 address for outgoing ICMPv6 replies ························································· 205
Enabling Layer 3 packet statistics collection ·································································································· 205
Enabling IPv6 local fragment reassembly ······································································································ 206
Enabling discarding IPv6 packets that contain extension headers ································································ 206
Display and maintenance commands for IPv6 basics ··················································································· 206
Basic IPv6 settings configuration examples ··································································································· 207
Example: Configuring basic IPv6 settings ······························································································ 207
viii
Configuring IPv6 neighbor discovery ························································· 213
About IPv6 neighbor discovery ······················································································································ 213
ICMPv6 messages used by IPv6 neighbor discovery ············································································ 213
Address resolution ································································································································· 213
Neighbor reachability detection ·············································································································· 214
Duplicate address detection ··················································································································· 214
Router/prefix discovery and stateless address autoconfiguration ·························································· 215
Redirection ············································································································································· 215
Protocols and standards ························································································································ 215
IPv6 neighbor discovery tasks at a glance ····································································································· 215
Configuring a static neighbor entry ················································································································ 216
Setting the dynamic neighbor learning limit ··································································································· 217
Enabling unsolicited NA learning ··················································································································· 218
Setting the aging timer for ND entries in stale state ······················································································· 218
Setting ND entry probing parameters············································································································· 219
Minimizing link-local ND entries ····················································································································· 220
Setting the hop limit········································································································································ 220
Configuring RA message sending and parameters ······················································································· 220
About RA message parameters ············································································································· 220
Restrictions and guidelines ···················································································································· 221
Enabling the sending of RA messages ·································································································· 221
Configuring parameters for RA messages ····························································································· 222
Specifying DNS server information in RA messages ············································································· 223
Specifying DNS suffix information in RA messages ··············································································· 224
Suppressing advertising DNS information in RA messages ·································································· 224
Setting the maximum number of attempts to send an NS message for DAD ················································ 225
Enabling duplicate detection for duplicate addresses ···················································································· 226
Configuring ND snooping in a VLAN ·············································································································· 226
About ND snooping in a VLAN ··············································································································· 226
Enabling ND snooping ··························································································································· 227
Setting the ND snooping entry learning limit ·························································································· 228
Configuring ND snooping entry related parameters ··············································································· 228
Configuring ND snooping in a VXLAN ··········································································································· 229
About ND snooping in a VXLAN ············································································································ 229
Procedure ··············································································································································· 229
Enabling ND proxy ········································································································································· 229
About ND proxy ······································································································································ 229
Enabling common ND proxy ·················································································································· 230
Enabling local ND proxy ························································································································· 231
Configuring IPv6 ND direct route advertisement ···························································································· 231
About IPv6 ND direct route advertisement ····························································································· 231
Application in Layer 3 access networks ································································································· 231
Procedure ··············································································································································· 231
Enabling recording user IPv6 address conflicts ····························································································· 232
Enabling recording user port migrations ········································································································ 232
Enabling ND logging for user online and offline events ················································································· 233
Logging ND entry deployment events ············································································································ 233
Dropping NS packets that match the FIB table by destination address ························································· 234
Performing ND-ping ······································································································································· 234
Using ND-ping to verify the availability of an IPv6 address ···································································· 234
Using ND-Ping to obtain the IPv6 address for a MAC address ······························································ 235
Display and maintenance commands for IPv6 ND ························································································ 235
IPv6 ND configuration examples ···················································································································· 236
Example: Configuring ND snooping ······································································································· 236
DHCPv6 overview······················································································ 239
DHCPv6 address/prefix assignment ·············································································································· 239
Rapid assignment involving two messages ··························································································· 239
Assignment involving four messages ····································································································· 239
Address/prefix lease renewal ························································································································· 240
Stateless DHCPv6 ········································································································································· 241
ix
DHCPv6 options············································································································································· 241
Option 18 ················································································································································ 241
Option 37 ················································································································································ 242
Option 79 ················································································································································ 243
Protocols and standards ································································································································ 243
Configuring the DHCPv6 server ································································· 244
About DHCPv6 server ···································································································································· 244
IPv6 address assignment ······················································································································· 244
IPv6 prefix assignment ··························································································································· 244
Concepts ················································································································································ 245
DHCPv6 address pool ···························································································································· 245
IPv6 address/prefix allocation sequence ································································································ 246
DHCPv6 server tasks at a glance ·················································································································· 247
Configuring IPv6 prefix assignment ··············································································································· 247
Configuring IPv6 address assignment ··········································································································· 249
Configuring network parameters assignment ································································································ 250
About network parameters assignment·································································································· 250
Configuring network parameters in a DHCPv6 address pool································································· 251
Configuring network parameters in a DHCPv6 option group ································································· 251
Configuring the DHCPv6 server on an interface ···························································································· 252
Configuring a DHCPv6 policy for IPv6 address and prefix assignment ························································· 253
Setting the DSCP value for DHCPv6 packets sent by the DHCPv6 server ··················································· 254
Configuring DHCPv6 binding auto backup····································································································· 254
Advertising subnets assigned to clients ········································································································· 255
Enabling the DHCPv6 server to advertise IPv6 prefixes ················································································ 256
Configuring DHCPv6 vendor-specific options ································································································ 256
Applying a DHCPv6 address pool to a VPN instance ···················································································· 257
Enabling IPv6 address binding conversion for IP source guard ···································································· 257
Configuring SNMP notifications for the DHCPv6 server ················································································ 258
About SNMP DHCPv6 server notifications ···························································································· 258
Enabling IPv6 resource exhaustion notifications ···················································································· 258
Enabling IPv6 address usage alarm notifications ·················································································· 258
Enabling IPv6 prefix usage alarm notifications ······················································································ 259
Enabling DHCPv6 logging on the DHCPv6 server························································································· 259
Enabling IPv6 resource exhaustion logging ··································································································· 259
Display and maintenance commands for DHCPv6 server ············································································· 260
DHCPv6 server configuration examples ········································································································ 261
Example: Configuring dynamic IPv6 prefix assignment ········································································· 261
Example: Configuring dynamic IPv6 address assignment ····································································· 264
Configuring the DHCPv6 relay agent ························································· 266
About DHCPv6 relay agent ···························································································································· 266
Typical application ·································································································································· 266
DHCPv6 relay agent operating process ································································································· 266
DHCPv6 relay agent tasks at a glance ·········································································································· 267
Enabling the DHCPv6 relay agent on an interface ························································································ 267
Specifying DHCPv6 servers on the relay agent ····························································································· 268
Specifying DHCPv6 server IP addresses ······························································································· 268
Specifying DHCPv6 servers for a DHCPv6 address pool on the DHCPv6 relay agent ························· 268
Specifying a gateway address for DHCPv6 clients ························································································ 269
Setting the DUID entry aging timer for smart relay ························································································ 269
Configuring DHCPv6 smart relay for address acquisition from different IPv6 subnets for a client ················ 270
Setting the DSCP value for DHCPv6 packets sent by the DHCPv6 relay agent ··········································· 271
Specifying a padding mode for the Interface-ID option ·················································································· 271
Configuring the DHCPv6 relay agent to add Option 37 in Relay-forward messages ····································· 272
Enabling the DHCPv6 relay agent to support Option 79 ················································································ 272
Enabling the DHCPv6 relay agent to advertise IPv6 prefixes ········································································ 273
Enabling advertising host routes for assigned IPv6 addresses······································································ 273
Specifying the source IPv6 address for relayed DHCPv6 requests ······························································· 274
Configuring DHCPv6 relay security features·································································································· 274
Enabling the DHCPv6 relay agent to record relay entries······································································ 274
x
Enabling IPv6 release notification ·········································································································· 275
Enabling client offline detection·············································································································· 275
Discarding DHCPv6 requests that are delivered from VXLAN tunnels ·························································· 275
Configuring support for forwarding DHCPv6 replies based on MAC address table ······································· 276
Display and maintenance commands for DHCPv6 relay agent ····································································· 277
DHCPv6 relay agent configuration examples ································································································ 278
Example: Configuring DHCPv6 relay agent ··························································································· 278
Configuring the DHCPv6 client ·································································· 280
About the DHCPv6 client ······························································································································· 280
Restrictions and guidelines: DHCPv6 client configuration ············································································· 280
DHCPv6 client tasks at a glance ···················································································································· 280
Configuring the DHCPv6 client DUID ············································································································ 280
Configuring IPv6 address acquisition ············································································································· 281
Configuring IPv6 prefix acquisition ················································································································· 281
Configuring IPv6 address and prefix acquisition ···························································································· 281
Configuring acquisition of configuration parameters except IP addresses and prefixes ································ 282
Setting the DSCP value for DHCPv6 packets sent by the DHCPv6 client ····················································· 282
Display and maintenance commands for DHCPv6 client ·············································································· 283
DHCPv6 client configuration examples ·········································································································· 283
Example: Configuring IPv6 address acquisition ····················································································· 283
Example: Configuring IPv6 prefix acquisition ························································································· 285
Example: Configuring IPv6 address and prefix acquisition ···································································· 286
Example: Configuring stateless DHCPv6 ······························································································· 288
Configuring DHCPv6 snooping ·································································· 291
About DHCPv6 snooping ······························································································································· 291
Application of trusted and untrusted ports······························································································ 291
DHCPv6 snooping on a DRNI network ·································································································· 292
Restrictions and guidelines: DHCPv6 snooping configuration ······································································· 293
DHCPv6 snooping tasks at a glance·············································································································· 293
Configuring basic DHCPv6 snooping features ······························································································· 294
Configuring basic DHCPv6 snooping features in a common network ···················································· 294
Configuring basic DHCPv6 snooping features in a VXLAN network ······················································ 295
Configuring DHCP snooping support for Option 18 ······················································································· 297
Configuring DHCP snooping support for Option 37 ······················································································· 297
Configuring DHCPv6 snooping entry auto backup························································································· 297
Setting the maximum number of DHCPv6 snooping entries ·········································································· 298
Configuring DHCPv6 packet rate limit············································································································ 298
Configuring DHCPv6 snooping security features ··························································································· 299
Enabling DHCPv6-REQUEST check ····································································································· 299
Configuring a DHCPv6 packet blocking port ·························································································· 300
Enabling LDRA on the DHCPv6 snooping device ························································································· 300
Enabling Relay-Forward packet check··········································································································· 301
Enabling client offline detection on the DHCPv6 snooping device ································································ 301
Enabling DHCPv6 snooping logging and alarm ····························································································· 302
Enabling DHCPv6 snooping logging ······································································································ 302
Configuring packet drop alarm ··············································································································· 302
Disabling DHCPv6 snooping on an interface ································································································· 303
Display and maintenance commands for DHCPv6 snooping ········································································ 303
DHCPv6 snooping configuration examples···································································································· 304
Example: Configuring DHCPv6 snooping globally ················································································· 304
Example: Configuring DHCPv6 snooping for a VLAN ············································································ 305
Configuring DHCPv6 guard ······································································· 307
About DHCPv6 guard····································································································································· 307
DHCPv6 guard operating mechanism ··········································································································· 307
Restrictions and guidelines: DHCPv6 guard configuration ············································································ 308
DHCPv6 guard tasks at a glance ··················································································································· 308
Configuring a DHCPv6 guard policy ·············································································································· 308
Applying a DHCPv6 guard policy to an interface ··························································································· 309
Applying a DHCPv6 guard policy to a VLAN·································································································· 309
xi
Display and maintenance commands for DHCPv6 guard ·············································································· 310
DHCPv6 guard configuration examples ········································································································· 310
Example: Configuring DHCPv6 guard ···································································································· 310
Configuring IPv6 fast forwarding ································································ 312
About IPv6 fast forwarding ····························································································································· 312
Configuring the aging time for IPv6 software fast forwarding entries ····························································· 312
Configuring IPv6 fast forwarding load sharing for software ··········································································· 312
Display and maintenance commands for IPv6 fast forwarding ······································································ 313
Configuring tunneling ················································································· 314
About tunneling ·············································································································································· 314
Supported tunneling technologies ·················································································································· 314
Restrictions and guidelines: Tunnel interface configuration ··········································································· 314
Prerequisites for tunnel configuration············································································································· 314
Configuring a tunnel interface ························································································································ 314
About tunnel interface configuration······································································································· 314
Tunnel interface configuration tasks at a glance ···················································································· 315
Creating a tunnel interface ····················································································································· 315
Specifying traffic processing slots for the tunnel interface ····································································· 316
Restoring the default settings of the tunnel interface ············································································· 316
Adding TUNNEL to the PHY_UPDOWN log mnemonic for tunnel interfaces ········································ 317
Assigning a VXLAN tunnel interface to a VXLAN tunnel group ····························································· 317
Enabling SNMP notifications for the tunneling module ·········································································· 318
Display and maintenance commands for tunnel interface configuration ························································ 318
Troubleshooting tunnel interface configuration ······························································································ 319
Tunnel interface not up ·························································································································· 319
IPv6 over IPv4 tunneling ············································································ 320
About IPv6 over IPv4 tunneling ······················································································································ 320
Implementation ······································································································································· 320
Tunnel modes ········································································································································ 320
IPv6 over IPv4 tunneling tasks at a glance ···································································································· 322
Configuring an IPv6 over IPv4 manual tunnel ································································································ 322
Restrictions and guidelines ···················································································································· 322
Procedure ··············································································································································· 322
Example: Configuring an IPv6 over IPv4 manual tunnel ········································································ 323
Configuring a 6to4 tunnel ······························································································································· 325
Restrictions and guidelines ···················································································································· 325
Procedure ··············································································································································· 325
Example: Configuring a 6to4 tunnel ······································································································· 326
Configuring an ISATAP tunnel ······················································································································· 328
Restrictions and guidelines ···················································································································· 328
Procedure ··············································································································································· 328
Example: Configuring an ISATAP tunnel ······························································································· 329
Enabling dropping IPv6 packets that use IPv4-compatible IPv6 addresses ·················································· 330
IPv4 over IPv4 tunneling ············································································ 332
About IPv4 over IPv4 tunneling ······················································································································ 332
Restrictions and guidelines: IPv4 over IPv4 tunnel configuration ·································································· 332
Configuring an IPv4 over IPv4 tunnel ············································································································ 333
IPv4 over IPv4 tunnel configuration examples ······························································································· 333
Example: Configuring an IPv4 over IPv4 tunnel ····················································································· 333
IPv4 over IPv6 tunneling ············································································ 337
About IPv4 over IPv6 tunneling ······················································································································ 337
Implementation ······································································································································· 337
Configuring an IPv4 over IPv6 tunnel ············································································································ 337
Restrictions and guidelines ···················································································································· 337
Procedure ··············································································································································· 338
Example: Configuring an IPv4 over IPv6 tunnel ····················································································· 338
xii
IPv6 over IPv6 tunneling ············································································ 342
About IPv6 over IPv6 tunneling ······················································································································ 342
Restrictions and guidelines: IPv6 over IPv6 tunnel configuration ·································································· 342
IPv6 over IPv6 tunnel configuration tasks at a glance ··················································································· 343
Configuring an IPv6 over IPv6 tunnel ············································································································ 343
Enabling dropping IPv6 packets that use IPv4-compatible IPv6 addresses ·················································· 343
IPv6 over IPv6 tunnel configuration examples ······························································································· 344
Example: Configuring an IPv6 over IPv6 tunnel ····················································································· 344
Configuring GRE ······················································································· 347
About GRE ····················································································································································· 347
GRE encapsulation format ····················································································································· 347
GRE tunnel operating principle ·············································································································· 347
GRE application scenarios ····················································································································· 348
Protocols and standards ························································································································ 349
Restrictions and guidelines: GRE configuration ····························································································· 349
Prerequisites for GRE ···································································································································· 350
Configuring a GRE/IPv4 tunnel ······················································································································ 350
Configuring a GRE/IPv6 tunnel ······················································································································ 351
Enabling dropping IPv6 packets that use IPv4-compatible IPv6 addresses ·················································· 352
Display and maintenance commands for GRE ······························································································ 352
GRE configuration examples ························································································································· 352
Example: Configuring an IPv4 over IPv4 GRE tunnel ············································································ 352
Example: Configuring an IPv4 over IPv6 GRE tunnel ············································································ 355
Troubleshooting GRE····································································································································· 357
Hosts at both ends of a GRE tunnel cannot ping each other ································································· 358
Configuring HTTP redirect ········································································· 359
About HTTP redirect ······································································································································ 359
HTTP redirect tasks at a glance ····················································································································· 359
Specifying the HTTPS redirect listening port number ···················································································· 359
Associating an SSL server policy with the HTTPS redirect service ······························································· 360
Document conventions and icons ······························································ 361
Conventions ··················································································································································· 361
Network topology icons ·································································································································· 362
Support and other resources ····································································· 363
Accessing Hewlett Packard Enterprise Support····························································································· 363
Accessing updates ········································································································································· 363
Websites ················································································································································ 364
Customer self repair ······························································································································· 364
Remote support ······································································································································ 364
Documentation feedback ······················································································································· 364
Index ·········································································································· 366
1
Configuring ARP
About ARP
ARP resolves IP addresses into MAC addresses on Ethernet networks.
ARP message format
ARP uses two types of messages: ARP request and ARP reply. Figure 1 shows the format of ARP
request/reply messages. Numbers in the figure refer to field lengths.
Figure 1 ARP message format
•
Hardware type—Hardware address type. The value 1 represents Ethernet.
•
Protocol type—Type of the protocol address to be mapped. The hexadecimal value 0x0800
represents IP.
•
Hardware address length and protocol address length—Length, in bytes, of a hardware
address and a protocol address. For an Ethernet address, the value of the hardware address
length field is 6. For an IPv4 address, the value of the protocol address length field is 4.
•
OP—Operation code, which describes the type of ARP message. The value 1 represents an
ARP request, and the value 2 represents an ARP reply.
•
Sender hardware address—Hardware address of the device sending the message.
•
Sender protocol address—Protocol address of the device sending the message.
•
Target hardware address—Hardware address of the device to which the message is being
sent.
•
Target protocol address—Protocol address of the device to which the message is being sent.
ARP operating mechanism
As shown in Figure 2, Host A and Host B are on the same subnet. Host A sends a packet to Host B as
follows:
1. Host A looks through the ARP table for an ARP entry for Host B. If one entry is found, Host A
uses the MAC address in the entry to encapsulate the IP packet into a data link layer frame.
Then Host A sends the frame to Host B.
2. If Host A finds no entry for Host B, Host A buffers the packet and broadcasts an ARP request.
The payload of the ARP request contains the following information:
 Sender IP address and sender MAC address—Host A's IP address and MAC address.
 Target IP address—Host B's IP address.
 Target MAC address—An all-zero MAC address.
28-byte ARP request/reply
OP Sender hardware
address Sender protocol
address Target hardware
address Target protocol
address
Protocol
type
22 61 442 61
Hardware address length
Protocol address length
Hardware
type
2
All hosts on this subnet can receive the broadcast request, but only the requested host (Host B)
processes the request.
3. Host B compares its own IP address with the target IP address in the ARP request. If they are
the same, Host B operates as follows:
a. Adds the sender IP address and sender MAC address into its ARP table.
b. Encapsulates its MAC address into an ARP reply.
c. Unicasts the ARP reply to Host A.
4. After receiving the ARP reply, Host A operates as follows:
a. Adds the MAC address of Host B into its ARP table.
b. Encapsulates the MAC address into the packet and sends the packet to Host B.
Figure 2 ARP address resolution process
If Host A and Host B are on different subnets, Host A sends a packet to Host B as follows:
5. Host A broadcasts an ARP request where the target IP address is the IP address of the
gateway.
6. The gateway responds with its MAC address in an ARP reply to Host A.
7. Host A uses the gateway's MAC address to encapsulate the packet, and then sends the packet
to the gateway.
8. If the gateway has an ARP entry for Host B, it forwards the packet to Host B directly. If not, the
gateway broadcasts an ARP request, in which the target IP address is the IP address of Host B.
9. After the gateway gets the MAC address of Host B, it sends the packet to Host B.
ARP entry types
An ARP table stores dynamic ARP entries, OpenFlow ARP entries, Rule ARP entries, and static ARP
entries.
Dynamic ARP entry
ARP automatically creates and updates dynamic entries. A dynamic ARP entry is removed when its
aging timer expires or the output interface goes down. In addition, a dynamic ARP entry can be
overwritten by a static ARP entry.
Static ARP entry
A static ARP entry is manually configured and maintained. It does not age out and cannot be
overwritten by any dynamic ARP entry.
Static ARP entries protect communication between devices because attack packets cannot modify
the IP-to-MAC mapping in a static ARP entry.
The device supports the following types of static ARP entries:
Target IP
address
192.168.1.1
Target IP
address
192.168.1.2
Host A
192.168.1.1
0002-6779-0f4c
Host B
192.168.1.2
00a0-2470-febd
Target MAC
address
0000-0000-0000
Sender MAC
address
00a0-2470-febd
Target MAC
address
0002-6779-0f4c
Sender IP
address
192.168.1.1
Sender MAC
address
0002-6779-0f4c
Sender IP
address
192.168.1.2
3
•
Long static ARP entry—It is directly used for forwarding packets. A long static ARP entry
contains the IP address, MAC address, and one of the following combinations:
ï‚¡ VLAN and output interface.
ï‚¡ Input and output interfaces.
•
Short static ARP entry—It contains only the IP address and MAC address.
If the output interface is a Layer 3 Ethernet interface, the short ARP entry can be directly used to
forward packets.
If the output interface is a VLAN interface, the device sends an ARP request whose target IP
address is the IP address in the short entry. If the sender IP and MAC addresses in the received
ARP reply match the short static ARP entry, the device performs the following operations:
ï‚¡ Adds the interface that received the ARP reply to the short static ARP entry.
ï‚¡ Uses the resolved short static ARP entry to forward IP packets.
•
Multiport ARP entry—It contains the IP address, MAC address, and VLAN/VSI information.
The device can use a multiport ARP entry that has the same MAC address and VLAN/VSI as a
multicast or multiport unicast MAC address entry for packet forwarding. A multiport ARP entry is
manually configured. It does not age out and cannot be overwritten by any dynamic ARP entry.
To communicate with a host by using a fixed IP-to-MAC mapping, configure a short static ARP entry
on the device. To communicate with a host by using a fixed IP-to-MAC mapping through an interface
in a VLAN, configure a long static ARP entry on the device.
OpenFlow ARP entry
ARP creates OpenFlow ARP entries by learning from the OpenFlow module. An OpenFlow ARP
entry does not age out, and it cannot be updated. An OpenFlow ARP entry can be used directly to
forward packets. For more information about OpenFlow, see OpenFlow Configuration Guide.
Rule ARP entry
Rule ARP entries can be directly used for packet forwarding. A Rule ARP entry does not age out, and
it cannot be updated. It can be overwritten by a static ARP entry.
ARP creates Rule ARP entries by learning from the following modules:
•
Portal. For more information about portal, see Security Configuration Guide.
•
VXLAN. For more information about VXLAN, see VXLAN overview in VXLAN Configuration
Guide.
•
OVSDB. For more information about OVSDB, see OVSDB-VTEP configuration in VXLAN
Configuration Guide.
ARP tasks at a glance
All ARP tasks are optional.
•
Configuring a static ARP entry
ï‚¡ Configuring a short static ARP entry
ï‚¡ Configuring a long static ARP entry
ï‚¡ Configuring a multiport ARP entry
•
Configuring features for dynamic ARP entries
ï‚¡ Setting the dynamic ARP learning limit for a device
ï‚¡ Setting the dynamic ARP learning limit for an interface
ï‚¡ Setting the aging timer for dynamic ARP entries
ï‚¡ Setting the maximum number of probes for dynamic ARP entries
ï‚¡ Setting the interval for probing dynamic ARP entries
4
ï‚¡ Enabling dynamic ARP entry check
•
Synchronizing ARP entries across all member devices
•
Configuring a customer-side or network-side port
•
Enabling user information checking for ARP entries:
ï‚¡ Enabling recording user IP address conflicts
ï‚¡ Enabling recording user port migrations
•
Enabling unknown source MAC-triggered ARP probing
•
Enabling ARP logging
•
Enabling error logging for ARP entry deployment to hardware
Configuring a static ARP entry
Static ARP entries are effective when the device functions correctly.
Configuring a short static ARP entry
Restrictions and guidelines
A resolved short static ARP entry becomes unresolved upon certain events, for example, when the
resolved output interface goes down, or the corresponding VLAN or VLAN interface is deleted.
Procedure
1. Enter system view.
system-view
2. Configure a short static ARP entry.
arp static ip-address mac-address [ vpn-instance vpn-instance-name ]
[ description text ]
Configuring a long static ARP entry
About this task
Long static ARP entries can be effective or ineffective. Ineffective long static ARP entries cannot be
used for packet forwarding. A long static ARP entry is ineffective when any of the following conditions
exists:
•
The IP address in the entry conflicts with a local IP address.
•
No local interface has an IP address in the same subnet as the IP address in the ARP entry.
A long static ARP entry for a VLAN is deleted if the VLAN or VLAN interface is deleted.
Procedure
1. Enter system view.
system-view
2. Configure a long static ARP entry.
arp static ip-address mac-address [ vlan-id interface-type
interface-number | vsi-interface vsi-interface-id tunnel number vsi
vsi-name | vsi-interface vsi-interface-id interface-type
interface-number service-instance instance-id vsi vsi-name ]
[ vpn-instance vpn-instance-name ] [ description text ]
5
Configuring a multiport ARP entry
About this task
A multiport ARP entry contains an IP address, MAC address, output interface, and VLAN ID/VSI
information. The VLAN and output interfaces are specified by a multiport unicast MAC address entry
or a multicast MAC address entry. For more information about multiport unicast MAC address entries,
see Layer—2 LAN Switching Configuration Guide. For more information about multicast MAC
address entries, see IGMP snooping configuration in IP Multicast Configuration Guide.
A multiport ARP entry can overwrite a dynamic, short static or long static ARP entry. Conversely, a
short static or long static ARP entry can overwrite a multiport ARP entry.
Restrictions and guidelines
For a multiport ARP entry to be effective for packet forwarding, make sure the following conditions
are met:
•
A multiport unicast MAC address entry or a multicast MAC address entry exists.
•
The multiport ARP entry must have the same MAC address and VLAN/VSI setting as the
multiport unicast MAC address entry or the multicast MAC address entry.
•
The IP address in the multiport ARP entry must reside on the same subnet as the VLAN
interface of the specified VLAN.
When you configure multiport ARP entries in an overlay network, first specify VSI gateway services
for a service loopback group.
Procedure
1. Enter system view.
system-view
2. Configure a multiport unicast MAC address entry or a multicast MAC address entry.
ï‚¡ Configure a multiport unicast MAC address entry in a common network.
mac-address multiport mac-address interface interface-list vlan
vlan-id
ï‚¡ Configure a local multiport unicast MAC address entry in a VXLAN network.
mac-address multiport mac-address { interface { interface-type
interface-number service-instance instance-id }&<1-4> } vsi
vsi-name
ï‚¡ Configure a remote multiport unicast MAC address entry in a VXLAN network.
mac-address multiport mac-address { interface { tunnel
tunnel-number1 [ to tunnel tunnel-number2 ] }&<1-4> } vsi vsi-name
ï‚¡ Configure a multicast MAC address entry in a common network.
mac-address multicast mac-address interface interface-list vlan
vlan-id
ï‚¡ Configure a local static multicast MAC address entry in a VXLAN network.
mac-address multicast mac-address { interface { interface-type
interface-number service-instance instance-id }&<1-4> } vsi
vsi-name
ï‚¡ Configure a remote static multicast MAC address entry in a VXLAN network.
mac-address multicast mac-address { interface { tunnel
tunnel-number1 [ to tunnel tunnel-number2 ] }&<1-4> } vsi vsi-name
3. Configure a multiport ARP entry.
6
arp multiport ip-address mac-address { vlan-id | vsi-interface
vsi-interface-id vsi vsi-name } [ vpn-instance vpn-instance-name ]
[ description text ]
Configuring features for dynamic ARP entries
Setting the dynamic ARP learning limit for a device
About this task
A device can dynamically learn ARP entries. To prevent a device from holding too many ARP entries,
you can set the maximum number of dynamic ARP entries that the device can learn. When the limit
is reached, the device stops ARP learning.
If you set a value lower than the number of existing dynamic ARP entries, the device does not delete
the existing entries unless they age out. You can use the reset arp dynamic command to clear
dynamic ARP entries.
Procedure
1. Enter system view.
system-view
2. Set the dynamic ARP learning limit for the device.
arp max-learning-number max-number slot slot-number
By default, the device can learn a maximum of 163840 dynamic ARP entries.
To disable the device from dynamic ARP learning, set the value to 0.
Setting the dynamic ARP learning limit for an interface
About this task
An interface can dynamically learn ARP entries. To prevent an interface from holding too many ARP
entries, you can set the maximum number of dynamic ARP entries that the interface can learn. When
the limit is reached, the interface stops ARP learning.
You can set limits for both a Layer 2 interface and the VLAN interface for a permitted VLAN on the
Layer 2 interface. The Layer 2 interface learns an ARP entry only when neither limit is reached.
The total dynamic ARP learning limit for all interfaces will not be higher than the dynamic ARP
learning limit for the device.
Procedure
1. Enter system view.
system-view
2. Enter interface view.
interface interface-type interface-number
3. Set the dynamic ARP learning limit for the interface.
arp max-learning-num max-number [ alarm alarm-threshold ]
By default, an interface can learn a maximum of 163840 dynamic ARP entries.
To disable the interface from dynamic ARP learning, set the value to 0.
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
-
1
-
2
-
3
-
4
-
5
-
6
-
7
-
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
-
428
-
429
-
430
-
431
-
432
Ask a question and I''ll find the answer in the document
Finding information in a document is now easier with AI
Related papers
-
Aruba R9F19A Configuration Guide
-
Aruba JH691A Reference guide
-
Aruba JH103A Configuration Guide
-
HPE FlexNetwork 7500 Series Security Configuration Manual
-
Aruba JH691A Configuration Guide
-
Aruba JL588A Configuration Guide
-
-
-
-
Other documents
-
Aruba Layer 3—IP Routing Configuration Guide
-
H3C MSR 3660 Configuration manual
-
H3C s5820x series Configuration manual
-
Aruba 6200F User guide
-
-
Aruba AOS-CX 10.12 IP Services User guide
-
-
-
Aruba 8360-32Y4C User guide
-