JG619A

Aruba JG619A Reference guide

  • Hello! I've reviewed the Command Reference for the HPE FlexFabric 12900E Switch Series. This document details the Layer 3 IP services command set, covering aspects like ARP, DHCP server and relay configurations, DNS settings, and IP forwarding options. I am ready to answer your questions about the switch's features and commands.
  • How do I enable ARP check logging?
    What command is used to display the ARP table?
    How can I configure a static ARP entry?
    What command enables DHCP logging?
    How do I display DHCP server statistics?
    What command enables DNS proxy function?
HPE FlexFabric 12900E Switch Series
Layer 3—IP Services Command Reference
Software
version: Release 5210
Document version: 6W100-20230424
© Copyright 2023 Hewlett Packard Enterprise Development LP
The information contained herein is subject to change without notice. The only warranties for Hewlett Packard
Enterprise products and services are set forth in the express warranty statements accompanying such
products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett
Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or
copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software
Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s
standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise
website.
Acknowledgments
Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the
United States and other countries.
Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the
United States and/or other countries.
Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.
Java and Oracle are registered trademarks of Oracle and/or its affiliates.
UNIX® is a registered trademark of The Open Group.
i
Contents
ARP commands ····························································································· 1
arp check enable ········································································································································ 1
arp check log enable ·································································································································· 1
arp ip-unique learning enable····················································································································· 2
arp ip-unnumbered learning enable ··········································································································· 3
arp mac-interface-consistency check enable ····························································································· 4
arp max-learning-num ································································································································ 5
arp max-learning-number ··························································································································· 6
arp mode uni ·············································································································································· 6
arp static ····················································································································································· 7
arp timer aging ··········································································································································· 9
arp timer aging probe-count ····················································································································· 10
arp timer aging probe-interval ·················································································································· 11
arp user-ip-conflict record enable············································································································· 13
arp user-move record enable ··················································································································· 13
display arp ················································································································································ 14
display arp entry-limit ······························································································································· 16
display arp ip-address ······························································································································ 17
display arp openflow count ······················································································································· 17
display arp timer aging ····························································································································· 18
display arp usage ····································································································································· 18
display arp user-ip-conflict record ············································································································ 19
display arp user-move record ··················································································································· 21
display arp vpn-instance ·························································································································· 22
reset arp ··················································································································································· 23
Gratuitous ARP commands ········································································· 24
arp ip-conflict log prompt ·························································································································· 24
arp send-gratuitous-arp ···························································································································· 24
gratuitous-arp mac-change retransmit ····································································································· 25
gratuitous-arp-learning enable ················································································································· 26
gratuitous-arp-sending enable ················································································································· 27
Proxy ARP commands ················································································· 28
display local-proxy-arp ····························································································································· 28
display proxy-arp ······································································································································ 28
display proxy-arp statistics ······················································································································· 29
local-proxy-arp enable ······························································································································ 30
proxy-arp enable ······································································································································ 31
ARP snooping commands ··········································································· 32
arp snooping enable································································································································· 32
display arp snooping ································································································································ 32
reset arp snooping ··································································································································· 34
ARP fast-reply commands ··········································································· 35
arp fast-reply enable ································································································································ 35
ARP direct route advertisement commands ················································· 36
arp route-direct advertise ························································································································· 36
arp route-direct advertise delay················································································································ 37
display arp route-direct advertise ······························································································· 38
IP addressing commands ············································································ 40
display ip interface ··································································································································· 40
display ip interface brief ··························································································································· 42
ip address ················································································································································· 43
ii
ip address unnumbered ··························································································································· 44
DHCP commands ························································································ 46
Common DHCP commands ····························································································································· 46
dhcp client-detect ····································································································································· 46
dhcp dscp ················································································································································· 46
dhcp enable ·············································································································································· 47
dhcp log enable ········································································································································ 47
dhcp select ··············································································································································· 48
DHCP server commands ································································································································· 49
address range ·········································································································································· 49
allocate-new-ip enable ····························································································································· 50
bims-server ·············································································································································· 51
bootfile-name ··········································································································································· 51
class ip-pool ············································································································································· 52
class option-group ···································································································································· 53
class range ··············································································································································· 54
default ip-pool ··········································································································································· 55
dhcp apply-policy ····································································································································· 56
dhcp class ················································································································································ 56
dhcp option-group ···································································································································· 57
dhcp policy ··············································································································································· 58
dhcp server allocated-ip threshold ··········································································································· 59
dhcp server always-broadcast ················································································································· 59
dhcp server apply ip-pool ························································································································· 60
dhcp server bootp ignore ························································································································· 61
dhcp server bootp reply-rfc-1048 ············································································································· 61
dhcp server check mac-address ·············································································································· 62
dhcp server database filename ················································································································ 62
dhcp server database update interval ······································································································ 64
dhcp server database update now ··········································································································· 64
dhcp server database update stop ··········································································································· 65
dhcp server forbidden-ip ·························································································································· 66
dhcp server ip-pool ··································································································································· 67
dhcp server multi-ip per-mac enable ········································································································ 67
dhcp server ping packets ························································································································· 68
dhcp server ping timeout ·························································································································· 69
dhcp server relay information enable ······································································································· 69
dhcp server reply-exclude-option60 ········································································································· 70
dhcp server request-ip-address check ····································································································· 71
display dhcp server conflict ······················································································································ 71
display dhcp server database ·················································································································· 72
display dhcp server expired ····················································································································· 73
display dhcp server free-ip ······················································································································· 75
display dhcp server ip-in-use ··················································································································· 76
display dhcp server pool ·························································································································· 78
display dhcp server statistics ··················································································································· 81
dns-list ······················································································································································ 83
domain-name ··········································································································································· 84
expired ····················································································································································· 84
forbidden-ip ·············································································································································· 85
forbidden-ip-range ···································································································································· 86
gateway-list ·············································································································································· 87
if-match ···················································································································································· 88
ip-in-use threshold ···································································································································· 90
nbns-list ···················································································································································· 91
netbios-type ·············································································································································· 92
network ····················································································································································· 93
next-server ··············································································································································· 94
option ······················································································································································· 95
reserve expired-ip enable ························································································································· 96
reserve expired-ip mode ·························································································································· 97
iii
reset dhcp server conflict ························································································································· 98
reset dhcp server expired ························································································································· 98
reset dhcp server ip-in-use ······················································································································· 99
reset dhcp server statistics ····················································································································· 100
snmp-agent trap enable dhcp server ····································································································· 100
static-bind ··············································································································································· 101
subnet alloc-mode ·································································································································· 102
subnet export-route disable ···················································································································· 103
subnet idle-time ······································································································································ 104
subnet mask-length ································································································································ 105
tftp-server domain-name ························································································································ 105
tftp-server ip-address ····························································································································· 106
valid class ··············································································································································· 107
verify class ············································································································································· 107
voice-config ············································································································································ 108
vpn-instance ··········································································································································· 109
DHCP relay agent commands ······················································································································· 110
dhcp relay always-unicast ······················································································································ 110
dhcp relay check mac-address ·············································································································· 110
dhcp relay check mac-address aging-time····························································································· 111
dhcp relay client-information record ······································································································· 112
dhcp relay client-information refresh ······································································································ 112
dhcp relay client-information refresh enable ·························································································· 113
dhcp relay dhcp-server timeout ·············································································································· 114
dhcp relay forward reply by-option82 ····································································································· 114
dhcp relay gateway ································································································································ 115
dhcp relay information circuit-id ············································································································· 116
dhcp relay information enable ················································································································ 118
dhcp relay information link-selection ······································································································ 119
dhcp relay information remote-id ············································································································ 120
dhcp relay information strategy ·············································································································· 121
dhcp relay insert option60 ······················································································································ 122
dhcp relay mac-forward enable ·············································································································· 123
dhcp relay master-server switch-delay ··································································································· 123
dhcp relay release ip ······························································································································ 124
dhcp relay request-from-tunnel discard·································································································· 124
dhcp relay server-address ······················································································································ 125
dhcp relay server-address algorithm ······································································································ 126
dhcp relay source-address ····················································································································· 127
dhcp-server timeout ······························································································································· 129
dhcp smart-relay enable ························································································································· 130
display dhcp relay check mac-address ·································································································· 130
display dhcp relay client-information ······································································································ 131
display dhcp relay information ················································································································ 133
display dhcp relay drni-status················································································································· 134
display dhcp relay server-address ········································································································· 135
display dhcp relay statistics ···················································································································· 136
gateway-list ············································································································································ 137
master-server switch-delay ···················································································································· 138
remote-server ········································································································································· 138
remote-server algorithm ························································································································· 139
reset dhcp relay client-information ········································································································· 140
reset dhcp relay statistics ······················································································································· 140
DHCP client commands ································································································································· 141
dhcp client dad enable ··························································································································· 141
dhcp client dscp ····································································································································· 141
dhcp client identifier ······························································································································· 142
display dhcp client ·································································································································· 143
ip address dhcp-alloc ····························································································································· 145
BOOTP client commands······························································································································· 146
display bootp client ································································································································· 146
ip address bootp-alloc ···························································································································· 147
iv
DNS commands ························································································ 148
display dns domain ································································································································ 148
display dns host ····································································································································· 149
display dns server ·································································································································· 150
display ipv6 dns server ··························································································································· 151
dns domain ············································································································································· 152
dns dscp ················································································································································· 153
dns host aging-time ································································································································ 153
dns proxy enable ···································································································································· 154
dns server ·············································································································································· 155
dns source-interface ······························································································································· 156
dns spoofing ··········································································································································· 157
dns trust-interface ·································································································································· 158
ip host ····················································································································································· 158
ipv6 dns dscp ········································································································································· 159
ipv6 dns server ······································································································································· 160
ipv6 dns spoofing ··································································································································· 161
ipv6 host ················································································································································· 162
reset dns host ········································································································································· 162
DDNS commands ······················································································ 164
ddns apply policy ···································································································································· 164
ddns dscp ··············································································································································· 165
ddns policy ············································································································································· 165
display ddns policy ································································································································· 166
interval ···················································································································································· 167
method ··················································································································································· 168
password ················································································································································ 169
ssl-client-policy ······································································································································· 170
url ··························································································································································· 171
username ··············································································································································· 173
Basic IP forwarding commands ································································· 174
display fib ··············································································································································· 174
forwarding arp-packet destination ·········································································································· 176
forwarding nd-packet destination ··········································································································· 176
forwarding hop-limit-exceeded destination····························································································· 177
forwarding hop-limit-unvaried destination ······························································································ 178
forwarding ttl-exceeded-packet destination···························································································· 179
forwarding ttl-unvaried destination ········································································································· 180
ip forwarding ··········································································································································· 180
ip forwarding ttl-unvaried ························································································································ 181
Fast forwarding commands ········································································ 182
display ip fast-forwarding aging-time ······································································································ 182
display ip fast-forwarding cache ············································································································· 182
display ip fast-forwarding fragcache ······································································································· 183
ip fast-forwarding aging-time ·················································································································· 184
ip fast-forwarding load-sharing ··············································································································· 185
reset ip fast-forwarding cache ················································································································ 185
Adjacency table commands ······································································· 186
display adjacent-table ···························································································································· 186
display ipv6 adjacent-table ····················································································································· 187
IRDP commands ······················································································· 190
ip irdp ····················································································································································· 190
ip irdp address ········································································································································ 190
ip irdp interval ········································································································································· 191
ip irdp lifetime ········································································································································· 192
ip irdp multicast ······································································································································ 192
v
ip irdp preference ··································································································································· 193
IP performance optimization commands ···················································· 194
display icmp statistics ····························································································································· 194
display ip statistics ································································································································· 195
display rawip ·········································································································································· 198
display rawip verbose ····························································································································· 199
display tcp ·············································································································································· 202
display tcp verbose ································································································································ 204
display udp ············································································································································· 208
display udp socket-loadbalance ············································································································· 209
display udp socket-loadbalance verbose ······························································································· 210
display udp statistics ······························································································································ 211
display udp verbose ······························································································································· 212
ip forward-broadcast ······························································································································ 216
ip icmp error-interval ······························································································································ 216
ip icmp fragment discarding ··················································································································· 217
ip icmp receive enable ··························································································································· 218
ip icmp send enable ······························································································································· 219
ip icmp source ········································································································································ 220
ip mtu ····················································································································································· 221
ip redirects enable ·································································································································· 222
ip ttl-expires enable ································································································································ 223
ip unreachables enable ·························································································································· 223
ip virtual-reassembly aging ···················································································································· 224
ip virtual-reassembly enable ·················································································································· 225
reset ip statistics ····································································································································· 226
reset udp statistics ································································································································· 226
tcp mss ··················································································································································· 227
tcp path-mtu-discovery ··························································································································· 228
tcp-proxy congestion-method ················································································································· 228
tcp syn-cookie enable ···························································································································· 229
tcp timer fin-timeout ································································································································ 230
tcp timer syn-timeout ······························································································································ 231
tcp window ············································································································································· 231
UDP helper commands ·············································································· 233
display udp-helper interface ··················································································································· 233
reset udp-helper statistics ······················································································································ 233
udp-helper broadcast-map ····················································································································· 234
udp-helper enable ·································································································································· 235
udp-helper multicast-map ······················································································································· 235
udp-helper port ······································································································································· 236
udp-helper server ··································································································································· 237
IPv6 basics commands ·············································································· 239
display ipv6 fib ········································································································································ 239
display ipv6 icmp statistics ····················································································································· 240
display ipv6 interface ······························································································································ 242
display ipv6 interface prefix ···················································································································· 246
display ipv6 pathmtu ······························································································································ 247
display ipv6 prefix ··································································································································· 248
display ipv6 rawip ··································································································································· 249
display ipv6 rawip verbose ····················································································································· 250
display ipv6 router-renumber statistics··································································································· 254
display ipv6 statistics ······························································································································ 255
display ipv6 tcp ······································································································································· 258
display ipv6 tcp verbose ························································································································· 259
display ipv6 udp ····································································································································· 264
display ipv6 udp verbose ························································································································ 265
ipv6 address ··········································································································································· 269
ipv6 address anycast ····························································································································· 269
vi
ipv6 address auto ··································································································································· 270
ipv6 address auto link-local ···················································································································· 271
ipv6 address eui-64 ································································································································ 272
ipv6 address link-local ···························································································································· 273
ipv6 address prefix-number ···················································································································· 274
ipv6 bandwidth-based-sharing ··············································································································· 275
ipv6 forwarding ······································································································································· 275
ipv6 hop-limit ·········································································································································· 276
ipv6 hoplimit-expires enable ··················································································································· 277
ipv6 icmpv6 error-interval ······················································································································· 277
ipv6 icmpv6 multicast-echo-reply enable ······························································································· 278
ipv6 icmpv6 receive enable ···················································································································· 279
ipv6 icmpv6 send enable ························································································································ 280
ipv6 icmpv6 source ································································································································ 281
ipv6 mtu ·················································································································································· 282
ipv6 pathmtu ··········································································································································· 283
ipv6 pathmtu age ···································································································································· 284
ipv6 prefer temporary-address ··············································································································· 284
ipv6 prefix ··············································································································································· 285
ipv6 reassemble local enable ················································································································· 286
ipv6 redirects enable ······························································································································ 286
ipv6 router-renumber enable ·················································································································· 287
ipv6 tcp-proxy congestion-method ········································································································· 287
ipv6 temporary-address ························································································································· 289
ipv6 unreachables enable ······················································································································ 290
ipv6 virtual-reassembly enable··············································································································· 290
reset ipv6 pathmtu ·································································································································· 291
reset ipv6 router-renumber statistics ······································································································ 292
reset ipv6 statistics ································································································································· 292
statistics l3-packet enable ······················································································································ 293
IPv6 neighbor discovery commands ·························································· 294
display ipv6 nd proxy statistics ··············································································································· 294
display ipv6 nd route-direct advertise ····································································································· 294
display ipv6 nd snooping count vsi········································································································· 296
display ipv6 nd snooping vsi ·················································································································· 296
display ipv6 nd user-ip-conflict record ···································································································· 297
display ipv6 nd user-move record ·········································································································· 299
display ipv6 neighbors ···························································································································· 300
display ipv6 neighbors count ·················································································································· 303
display ipv6 neighbors entry-limit ··········································································································· 303
display ipv6 neighbors statistics ············································································································· 304
display ipv6 neighbors usage ················································································································· 306
display ipv6 neighbors vpn-instance ······································································································ 307
ipv6 address duplicate-detect enable····································································································· 308
ipv6 address duplicate-detect interval ···································································································· 309
ipv6 nd autoconfig managed-address-flag ····························································································· 309
ipv6 nd autoconfig other-flag ·················································································································· 310
ipv6 nd dad attempts ······························································································································ 311
ipv6 nd ip-unique learning enable ·········································································································· 312
ipv6 nd mode uni ···································································································································· 312
ipv6 nd ns retrans-timer ························································································································· 313
ipv6 nd nud reachable-time ···················································································································· 314
ipv6 nd online-offline-log enable ············································································································ 314
ipv6 nd ra boot-file-url ···························································································································· 315
ipv6 nd ra dns search-list ······················································································································· 316
ipv6 nd ra dns search-list suppress········································································································ 317
ipv6 nd ra dns server ······························································································································ 318
ipv6 nd ra dns server suppress ·············································································································· 319
ipv6 nd ra halt ········································································································································· 320
ipv6 nd ra hop-limit unspecified ·············································································································· 321
ipv6 nd ra interval ··································································································································· 321
vii
ipv6 nd ra no-advlinkmtu ························································································································ 322
ipv6 nd ra prefix ······································································································································ 323
ipv6 nd ra prefix default ·························································································································· 324
ipv6 nd ra router-lifetime ························································································································ 325
ipv6 nd route-direct advertise ················································································································· 326
ipv6 nd route-direct advertise delay ······································································································· 327
ipv6 nd route-direct prefix convert-length ······························································································· 328
ipv6 nd router-preference ······················································································································· 329
ipv6 nd snooping enable global·············································································································· 329
ipv6 nd snooping enable link-local ········································································································· 330
ipv6 nd unsolicited-na-learning enable··································································································· 330
ipv6 nd user-ip-conflict record enable ···································································································· 331
ipv6 nd user-move record enable··········································································································· 332
ipv6 neighbor ·········································································································································· 333
ipv6 neighbor link-local minimize ··········································································································· 335
ipv6 neighbor stale-aging ······················································································································· 335
ipv6 neighbor timer stale-aging ·············································································································· 336
ipv6 neighbors max-learning-num ·········································································································· 337
local-proxy-nd enable ····························································································································· 338
proxy-nd enable ····································································································································· 338
proxy-nd span-segment enable·············································································································· 339
reset ipv6 nd snooping vsi ······················································································································ 340
reset ipv6 neighbors ······························································································································· 340
DHCPv6 commands ·················································································· 342
Common DHCPv6 commands ······················································································································· 342
display ipv6 dhcp duid ···························································································································· 342
ipv6 dhcp advertise pd-route ·················································································································· 342
ipv6 dhcp dscp ······································································································································· 343
ipv6 dhcp log enable ······························································································································ 343
ipv6 dhcp select ····································································································································· 344
DHCPv6 server commands···························································································································· 345
address range ········································································································································ 345
aftr-name ················································································································································ 346
class pool ··············································································································································· 347
default pool ············································································································································· 347
display ipv6 dhcp option-group ·············································································································· 348
display ipv6 dhcp pool ···························································································································· 350
display ipv6 dhcp prefix-pool ·················································································································· 353
display ipv6 dhcp server ························································································································· 355
display ipv6 dhcp server conflict ············································································································ 356
display ipv6 dhcp server database ········································································································· 356
display ipv6 dhcp server expired ············································································································ 357
display ipv6 dhcp server ip-in-use ·········································································································· 358
display ipv6 dhcp server pd-in-use ········································································································· 360
display ipv6 dhcp server statistics ·········································································································· 362
dns-server ·············································································································································· 364
domain-name ········································································································································· 365
if-match ·················································································································································· 365
ipv6 dhcp apply-policy ···························································································································· 367
ipv6 dhcp class ······································································································································· 368
ipv6 dhcp option-group ··························································································································· 369
ipv6 dhcp policy ······································································································································ 370
ipv6 dhcp pool ········································································································································ 370
ipv6 dhcp prefix-pool ······························································································································ 371
ipv6 dhcp server ····································································································································· 372
ipv6 dhcp server apply pool ··················································································································· 373
ipv6 dhcp server database filename ······································································································ 374
ipv6 dhcp server database update interval ···························································································· 376
ipv6 dhcp server database update now ································································································· 377
ipv6 dhcp server database update stop ································································································· 377
ipv6 dhcp server forbidden-address ······································································································· 378
viii
ipv6 dhcp server forbidden-prefix ··········································································································· 379
ipv6 dhcp server multi-ip per-mac enable ······························································································ 380
network ··················································································································································· 380
option ····················································································································································· 382
option-group ··········································································································································· 383
prefix-pool ·············································································································································· 384
reset ipv6 dhcp server conflict················································································································ 385
reset ipv6 dhcp server expired ··············································································································· 385
reset ipv6 dhcp server ip-in-use ············································································································· 386
reset ipv6 dhcp server pd-in-use ············································································································ 387
reset ipv6 dhcp server statistics ············································································································· 387
sip-server ··············································································································································· 388
static-bind ··············································································································································· 389
suboption ················································································································································ 390
temporary address range ······················································································································· 391
vendor-specific ······································································································································· 392
vpn-instance ··········································································································································· 393
DHCPv6 relay agent commands ···················································································································· 393
display ipv6 dhcp relay client-information address················································································· 393
display ipv6 dhcp relay client-information pd ························································································· 395
display ipv6 dhcp relay drni-status ········································································································· 397
display ipv6 dhcp relay server-address ·································································································· 398
display ipv6 dhcp relay statistics ············································································································ 399
gateway-list ············································································································································ 401
ipv6 dhcp client-detect ··························································································································· 402
ipv6 dhcp relay client-information record ······························································································· 402
ipv6 dhcp relay client-link-address enable ····························································································· 403
ipv6 dhcp relay gateway ························································································································· 404
ipv6 dhcp relay interface-id ···················································································································· 404
ipv6 dhcp relay release-agent ················································································································ 405
ipv6 dhcp relay request-from-tunnel discard ·························································································· 406
ipv6 dhcp relay server-address ·············································································································· 406
ipv6 dhcp relay source-address ············································································································· 407
remote-server ········································································································································· 408
reset ipv6 dhcp relay client-information address ···················································································· 409
reset ipv6 dhcp relay client-information pd ····························································································· 410
reset ipv6 dhcp relay statistics ··············································································································· 410
DHCPv6 client commands ····························································································································· 411
display ipv6 dhcp client ·························································································································· 411
display ipv6 dhcp client statistics ··········································································································· 413
ipv6 address dhcp-alloc ························································································································· 414
ipv6 dhcp client dscp ······························································································································ 415
ipv6 dhcp client duid ······························································································································· 416
ipv6 dhcp client pd ································································································································· 417
ipv6 dhcp client stateful ·························································································································· 417
ipv6 dhcp client stateless enable ··········································································································· 418
reset ipv6 dhcp client statistics ··············································································································· 419
IPv6 fast forwarding commands ································································· 420
display ipv6 fast-forwarding aging-time ·································································································· 420
display ipv6 fast-forwarding cache ········································································································· 420
ipv6 fast-forwarding aging-time ·············································································································· 421
ipv6 fast-forwarding load-sharing ··········································································································· 422
reset ipv6 fast-forwarding cache ············································································································ 423
IPv6 transition technologies commands ····················································· 424
tunnel ipv6-fragmentation-check enable ································································································ 424
Document conventions and icons ······························································ 425
Conventions ··················································································································································· 425
Network topology icons ·································································································································· 426
ix
Support and other resources ····································································· 427
Accessing Hewlett Packard Enterprise Support····························································································· 427
Accessing updates ········································································································································· 427
Websites ················································································································································ 428
Customer self repair ······························································································································· 428
Remote support ······································································································································ 428
Documentation feedback ······················································································································· 428
Index ·········································································································· 430
1
ARP commands
arp check enable
Use arp check enable to enable dynamic ARP entry check.
Use undo arp check enable to disable dynamic ARP entry check.
Syntax
arp check enable
undo arp check enable
Default
Dynamic ARP entry check is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Dynamic ARP entry check disables a device from supporting dynamic ARP entries with multicast
MAC addresses. The device cannot learn dynamic ARP entries containing multicast MAC addresses.
You cannot manually add static ARP entries that contain multicast MAC addresses.
When dynamic ARP entry check is disabled, ARP entries containing multicast MAC addresses are
supported. The device can learn dynamic ARP entries containing multicast MAC addresses obtained
from the ARP packets sourced from a unicast MAC address. You can also manually add static ARP
entries containing multicast MAC addresses.
Examples
# Enable dynamic ARP entry check.
<Sysname> system-view
[Sysname] arp check enable
arp check log enable
Use arp check log enable to enable the ARP logging feature.
Use undo arp check log enable to disable the ARP logging feature.
Syntax
arp check log enable
undo arp check log enable
Default
ARP logging is disabled.
Views
System view
2
Predefined user roles
network-admin
Usage guidelines
This feature enables a device to log ARP events when ARP cannot resolve IP addresses correctly.
The log information helps administrators locate and solve problems. The device can log the following
ARP events:
•
On a proxy ARP-disabled interface, the target IP address of a received ARP packet is not one of
the following IP addresses:
ï‚¡ The IP address of the receiving interface.
ï‚¡ The virtual IP address of the VRRP group.
•
The sender IP address of a received ARP reply conflicts with one of the following IP addresses:
ï‚¡ The IP address of the receiving interface.
ï‚¡ The virtual IP address of the VRRP group.
The device sends ARP log messages to the information center. You can use the info-center
source command to specify the log output rules for the information center. For more information
about information center, see System Management Configuration Guide.
The device can generate a large number of ARP logs. To conserve system resources, enable ARP
logging only when you are auditing or troubleshooting ARP events.
Examples
# Enable ARP logging.
<Sysname> system-view
[Sysname] arp check log enable
arp ip-unique learning enable
Use arp ip-unique learning enable to enable unique ARP entry learning for the device to
learn only one ARP entry for one IP address.
Use undo arp ip-unique learning enable to disable unique ARP entry learning for IP
addresses.
Syntax
arp ip-unique learning enable
undo arp ip-unique learning enable
Default
Unique ARP entry learning for IP addresses is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Application scenarios
Unique ARP entry learning enables the device to learn only one ARP entry for one IP address. This
feature prevents traffic loss that might occur in the IP numbered scenario because two ARP entries
exist for an endpoint after it moves between interfaces of the same IP address.
3
After you configure one interface to borrow an IP address from another interface by using the ip
address unnumbered command, the two interfaces have the same IP address. If an endpoint
moves from one of the interfaces to another with its IP address unchanged, the device will learn a
new ARP entry for the same IP address with a different interface than the ARP entry learned before
endpoint movement. This will cause loss of packets destined for the endpoint, because the FIB entry
for the endpoint is generated based on the ARP entry generated earlier for it.
Operating mechanism
With unique ARP entry learning enabled, the device deletes the existing ARP entry for an IP address
when it learns a new ARP entry with a different interface than the existing entry for that IP address.
This ensures that the outgoing interface in the FIB entry for the client is the one to which the endpoint
is attached.
Examples
# Enable unique ARP entry learning.
<Sysname> system-view
[Sysname] arp ip-unique learning enable
Related commands
ip address unnumbered
arp ip-unnumbered learning enable
Use arp ip-unnumbered learning enable to enable an IP unnumbered interface to learn
ARP entries for different subnets.
Use undo arp ip-unnumbered learning enable to disable an IP unnumbered interface
from learning ARP entries for different subnets.
Syntax
arp ip-unnumbered learning enable [ source-address ip-address ]
undo arp ip-unnumbered learning enable
Default
An IP unnumbered interface cannot learn ARP entries for different subnets.
Views
Interface view
Predefined user roles
network-admin
Parameters
source-address ip-address: Specifies the sender IP address in an ARP request sent by the
IP unnumbered interface. If you do not specify this option, the sender IP address in the ARP request
is the borrowed IP address.
Usage guidelines
Application scenarios
An IP unnumbered interface might be unable to learn the ARP entry for the peer device if the
unnumbered interface and the remote device are on different subnets. This is because some devices
treat an ARP request as illegal and do not return a reply if the sender and target IP addresses in that
ARP request are on different subnets.
4
To ensure communication between them, use this feature on the IP unnumbered interface to specify
a sender IP address on the same subnet as the IP address of the peer interface on the remote
device.
Restrictions and guidelines
This feature takes effect only on IP unnumbered interfaces, which are configured with the ip
address unnumbered command.
To avoid ARP learning anomalies, do not execute the arp ip-unnumbered learning enable
command on a non-IP-unnumbered interface.
If you disable an IP unnumbered interface from learning ARP entries for different subnets, the device
deletes the existing ARP entries learned for different subnets after they age out.
Examples
# Configure HundredGigE 1/0/1 to borrow the IP address of HundredGigE 1/0/2, and enable
HundredGigE 1/0/1 to learn ARP entries for different subnets.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1
[Sysname-HundredGigE1/0/1] ip address unnumbered interface hundredgige 1/0/2
[Sysname-HundredGigE1/0/1] arp ip-unnumbered learning enable
Related commands
ip address unnumbered
arp mac-interface-consistency check enable
Use arp mac-interface-consistency check enable to enable interface consistency
check between ARP and MAC address entries.
Use undo arp mac-interface-consistency check enable to disable interface
consistency check between ARP and MAC address entries.
Syntax
arp mac-interface-consistency check enable
undo arp mac-interface-consistency check enable
Default
Interface consistency check between ARP and MAC address entries is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
In an unstable network, the receiving interface for packets from a user might change. The interface in
the MAC address entry can be updated immediately while the interface in the ARP entry cannot. In
this case, the packets matching the ARP entry will be sent out of an incorrect interface. To solve this
problem, you can use this feature to periodically check the interface consistency between the ARP
and MAC address entry for a user. If the interfaces are not the same, ARP sends ARP requests in the
VLAN of the ARP entry and updates the entry with the ARP reply receiving interface.
Use the display mac-address command to display MAC address entries.
5
Examples
# Enable interface consistency check between ARP and MAC address entries.
<Sysname> system-view
[Sysname] arp mac-interface-consistency check enable
Related commands
display mac-address (Layer 2—LAN Switching Command Reference)
arp max-learning-num
Use arp max-learning-num to set the dynamic ARP learning limit for an interface.
Use undo arp max-learning-num to restore the default.
Syntax
arp max-learning-num max-number
undo arp max-learning-num
Default
An interface can learn a maximum of 747520 dynamic ARP entries.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Layer 3 Ethernet interface view
Layer 3 Ethernet subinterface view
Layer 3 aggregate interface view
Layer 3 aggregate subinterface view
VXLAN VSI interface view
VLAN interface view
Predefined user roles
network-admin
Parameters
max-number: Specifies the maximum number of dynamic ARP entries for an interface. The value
range for this argument is 0 to 747520.
Usage guidelines
An interface can dynamically learn ARP entries. To prevent an interface from holding too many ARP
entries, you can set the maximum number of dynamic ARP entries that the interface can learn. When
the maximum number is reached, the interface stops learning ARP entries.
When the number argument is set to 0, the interface is disabled from learning dynamic ARP entries.
Examples
# Specify VLAN-interface 40 to learn a maximum of 10 dynamic ARP entries.
<Sysname> system-view
[Sysname] interface vlan-interface 40
[Sysname-Vlan-interface40] arp max-learning-num 10
# Specify HundredGigE 1/0/1 to learn a maximum of 10 dynamic ARP entries.
6
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1
[Sysname-HundredGigE1/0/1] arp max-learning-num 10
# Specify Layer 2 aggregate interface Bridge-Aggregation 1 to learn a maximum of 10 dynamic ARP
entries.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] arp max-learning-num 10
# Specify Layer 3 aggregate interface Route-Aggregation 1 to learn a maximum of 10 dynamic ARP
entries.
<Sysname> system-view
[Sysname] interface route-aggregation 1
[Sysname-Route-Aggregation1] arp max-learning-num 10
arp max-learning-number
Use arp max-learning-number to set the dynamic ARP learning limit for a device.
Use undo arp max-learning-number to restore the default.
Syntax
arp max-learning-number max-number slot slot-number
undo arp max-learning-number slot slot-number
Default
The device can learn a maximum of 747520 dynamic ARP entries.
Views
System view
Predefined user roles
network-admin
Parameters
max-number: Specifies the maximum number of dynamic ARP entries for a device. The value
range for this argument is 0 to 90112.
slot slot-number: Specifies a card by its slot number.
Usage guidelines
A device can dynamically learn ARP entries. To prevent a device from holding too many ARP entries,
you can set the maximum number of dynamic ARP entries that the device can learn. When the
maximum number is reached, the device stops learning ARP entries.
When the number argument is set to 0, the device is disabled from learning dynamic ARP entries.
Examples
# Configure the device to learn a maximum of 64 dynamic ARP entries.
<Sysname> system-view
[Sysname] arp max-learning-number 64
arp mode uni
Use arp mode uni to configure a port as a customer-side port.
7
Use undo arp mode to restore the default.
Syntax
arp mode uni
undo arp mode
Default
A port operates as a network-side port.
Views
VLAN interface view
VXLAN VSI interface view
Predefined user roles
network-admin
Usage guidelines
By default, the device associates an ARP entry with routing information when the device learns an
ARP entry. The ARP entry provides the next hop information for routing. To save hardware resources,
you can use this command to specify a port that connects to a user terminal as a customer-side port.
The device will not associate the routing information with the learned ARP entries.
Examples
# Configure VLAN-interface 2 as a customer-side port.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] arp mode uni
arp static
Use arp static to configure a static ARP entry.
Use undo arp to delete an ARP entry.
Syntax
arp static ip-address mac-address [ vlan-id interface-type
interface-number | vsi-interface vsi-interface-id tunnel number vsi
vsi-name | vsi-interface vsi-interface-id interface-type
interface-number service-instance instance-id vsi vsi-name ]
[ vpn-instance vpn-instance-name ] [ description text ]
undo arp ip-address [ vpn-instance-name ]
Default
No static ARP entries exist.
Views
System view
Predefined user roles
network-admin
Parameters
ip-address: Specifies an IP address for the static ARP entry.
mac-address: Specifies a MAC address for the static ARP entry, in the format of H-H-H.
8
vlan-id: Specifies the ID of a VLAN to which the static ARP entry belongs. The value range is 1 to
4094.
interface-type interface-number: Specifies an interface by its type and number.
vsi-interface vsi-interface-id: Specifies a VSI interface by its number. The value for the
vsi-interface-id argument can be 1 or 17.
tunnel number: Specifies a tunnel interface by its number. The value for the number argument
can be 0 to 7, 9, 11, 17, 45, 77, 79, or 100.
vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.
service-instance instance-id: Specifies an Ethernet service instance by its ID in the range
of 1 to 4096. You must specify this option if you specify a Layer 2 Ethernet interface for the preceding
interface-type interface-number arguments. You cannot specify this option if you specify
an interface of other types for the preceding interface-type interface-number argument.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the static
ARP entry belongs. The vpn-instance-name argument represents the VPN instance name, a
case-sensitive string of 1 to 31 characters. The VPN instance must already exist. To specify a static
ARP entry on the public network, do not specify this option.
description text: Specifies a description of the static ARP entry. The value is a case-sensitive
string of 1 to 255 characters.
Usage guidelines
A static ARP entry is manually configured and maintained. It does not age out and cannot be
overwritten by any dynamic ARP entry.
Static ARP entries can be short or long.
A resolved short static ARP entry becomes unresolved upon certain events, for example, when the
resolved output interface goes down, or the corresponding VLAN or VLAN interface is deleted.
Long static ARP entries are effective or ineffective. Ineffective long static ARP entries cannot be
used for packet forwarding. A long static ARP entry is ineffective when any of the following conditions
exists:
•
The IP address in the entry conflicts with a local IP address.
•
No local interface has an IP address in the same subnet as the IP address in the ARP entry.
If you specify the vlan-id interface-type interface-number argument, follow these
restrictions and guidelines:
•
The interface can be an Ethernet interface or an aggregate interface.
•
The VLAN and VLAN interface must already exist. The specified Ethernet interface must belong
to the specified VLAN.
•
The IP address of the VLAN interface and the IP address specified by the ip-address
argument must be on the same network.
•
A long static ARP entry in a VLAN is deleted if the VLAN or VLAN interface is deleted.
On a VXLAN IP gateway that forwards traffic among VXLANs through VXLAN tunnels, a VSI
interface can act as the gateway for multiple VXLANs. The VSI interface (input interface) might be
connected to multiple VXLAN tunnel interfaces (output interfaces). In this case, you must specify the
vsi-interface vsi-interface-id tunnel number vsi vsi-name parameters to
identify a VSI interface-VSI-VXLAN tunnel interface binding. For more information about VSI
interfaces, VSI, and VXLAN tunnel interfaces, see VXLAN Configuration Guide.
On a VXLAN IP gateway that forwards traffic from multiple local sites to remote sites, a VSI interface
can act as the gateway for multiple local sites. The VSI interface (input interface) might be
associated with multiple Ethernet services (output interfaces) on Layer 2 Ethernet interfaces through
which the VSI interface connects to the local sites. In this case, you must specify the
9
vsi-interface vsi-interface-id interface-type interface-number
service-instance instance-id vsi vsi-name parameters to identify a VSI
interface-Layer 2 Ethernet interface-Ethernet service instance-VSI binding. For more information
about VSI interfaces, VSI, and Ethernet service instances, see VXLAN Configuration Guide.
Examples
# Configure a long static ARP entry that contains IP address 202.38.10.2, MAC address
00e0-fc01-0000, and output interface HundredGigE 1/0/1 in VLAN 10.
<Sysname> system-view
[Sysname] arp static 202.38.10.2 00e0-fc01-0000 10 hundredgige 1/0/1
# Configure a long static ARP entry that contains IP address 1.1.1.1, MAC address 00e0-fc01-0000,
input interface VSI-interface 1, output interface Tunnel 1, and VSI a.
<Sysname> system-view
[Sysname] arp static 1.1.1.1 00e0-fc01-0000 vsi-interface 1 tunnel 1 vsi a
# Configure a long static ARP entry that contains IP address 1.1.1.1, MAC address 00e0-fc01-0000,
input interface VSI-interface 1, output interface Ethernet instance 1 on HundredGigE 1/0/1, and VSI
a.
<Sysname> system-view
[Sysname] arp static 1.1.1.1 00e0-fc01-0000 vsi-interface 1 hundredgige 1/0/1 service-in
stance 1 vsi a
Related commands
display arp
reset arp
arp timer aging
Use arp timer aging to set the aging timer for dynamic ARP entries.
Use undo arp timer aging to restore the default.
Syntax
arp timer aging { aging-minutes | second aging-seconds }
undo arp timer aging
Default
In system view, the aging timer for dynamic ARP entries is 20 minutes.
In interface view, the aging timer for dynamic ARP entries is that set in system view.
Views
System view
Layer 3 Ethernet interface view
Layer 3 Ethernet subinterface view
Layer 3 aggregate interface view
Layer 3 aggregate subinterface view
VSI interface view
VLAN interface view
Predefined user roles
network-admin
/