Aruba JH345A Reference guide

HPE FlexFabric 12900E Switch Series

Layer 3—IP Services Command Reference

Software

version: Release 5210

Document version: 6W100-20230424

The information contained herein is subject to change without notice. The only warranties for Hewlett Packard

Enterprise products and services are set forth in the express warranty statements accompanying such

products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett

Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.

Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or

copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software

Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s

standard commercial license.

Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard

Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise

website.

Acknowledgments

Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the

United States and other countries.

Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the

United States and/or other countries.

Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.

Java and Oracle are registered trademarks of Oracle and/or its affiliates.

UNIX® is a registered trademark of The Open Group.

i

Contents

ARP commands ····························································································· 1

arp check enable ········································································································································ 1

arp check log enable ·································································································································· 1

arp ip-unique learning enable····················································································································· 2

arp ip-unnumbered learning enable ··········································································································· 3

arp mac-interface-consistency check enable ····························································································· 4

arp max-learning-num ································································································································ 5

arp max-learning-number ··························································································································· 6

arp mode uni ·············································································································································· 6

arp static ····················································································································································· 7

arp timer aging ··········································································································································· 9

arp timer aging probe-count ····················································································································· 10

arp timer aging probe-interval ·················································································································· 11

arp user-ip-conflict record enable············································································································· 13

arp user-move record enable ··················································································································· 13

display arp ················································································································································ 14

display arp entry-limit ······························································································································· 16

display arp ip-address ······························································································································ 17

display arp openflow count ······················································································································· 17

display arp timer aging ····························································································································· 18

display arp usage ····································································································································· 18

display arp user-ip-conflict record ············································································································ 19

display arp user-move record ··················································································································· 21

display arp vpn-instance ·························································································································· 22

reset arp ··················································································································································· 23

Gratuitous ARP commands ········································································· 24

arp ip-conflict log prompt ·························································································································· 24

arp send-gratuitous-arp ···························································································································· 24

gratuitous-arp mac-change retransmit ····································································································· 25

gratuitous-arp-learning enable ················································································································· 26

gratuitous-arp-sending enable ················································································································· 27

Proxy ARP commands ················································································· 28

display local-proxy-arp ····························································································································· 28

display proxy-arp ······································································································································ 28

display proxy-arp statistics ······················································································································· 29

local-proxy-arp enable ······························································································································ 30

proxy-arp enable ······································································································································ 31

ARP snooping commands ··········································································· 32

arp snooping enable································································································································· 32

display arp snooping ································································································································ 32

reset arp snooping ··································································································································· 34

ARP fast-reply commands ··········································································· 35

arp fast-reply enable ································································································································ 35

ARP direct route advertisement commands ················································· 36

arp route-direct advertise ························································································································· 36

arp route-direct advertise delay················································································································ 37

display arp route-direct advertise ······························································································· 38

IP addressing commands ············································································ 40

display ip interface ··································································································································· 40

display ip interface brief ··························································································································· 42

ip address ················································································································································· 43

ii

ip address unnumbered ··························································································································· 44

DHCP commands ························································································ 46

Common DHCP commands ····························································································································· 46

dhcp client-detect ····································································································································· 46

dhcp dscp ················································································································································· 46

dhcp enable ·············································································································································· 47

dhcp log enable ········································································································································ 47

dhcp select ··············································································································································· 48

DHCP server commands ································································································································· 49

address range ·········································································································································· 49

allocate-new-ip enable ····························································································································· 50

bims-server ·············································································································································· 51

bootfile-name ··········································································································································· 51

class ip-pool ············································································································································· 52

class option-group ···································································································································· 53

class range ··············································································································································· 54

default ip-pool ··········································································································································· 55

dhcp apply-policy ····································································································································· 56

dhcp class ················································································································································ 56

dhcp option-group ···································································································································· 57

dhcp policy ··············································································································································· 58

dhcp server allocated-ip threshold ··········································································································· 59

dhcp server always-broadcast ················································································································· 59

dhcp server apply ip-pool ························································································································· 60

dhcp server bootp ignore ························································································································· 61

dhcp server bootp reply-rfc-1048 ············································································································· 61

dhcp server check mac-address ·············································································································· 62

dhcp server database filename ················································································································ 62

dhcp server database update interval ······································································································ 64

dhcp server database update now ··········································································································· 64

dhcp server database update stop ··········································································································· 65

dhcp server forbidden-ip ·························································································································· 66

dhcp server ip-pool ··································································································································· 67

dhcp server multi-ip per-mac enable ········································································································ 67

dhcp server ping packets ························································································································· 68

dhcp server ping timeout ·························································································································· 69

dhcp server relay information enable ······································································································· 69

dhcp server reply-exclude-option60 ········································································································· 70

dhcp server request-ip-address check ····································································································· 71

display dhcp server conflict ······················································································································ 71

display dhcp server database ·················································································································· 72

display dhcp server expired ····················································································································· 73

display dhcp server free-ip ······················································································································· 75

display dhcp server ip-in-use ··················································································································· 76

display dhcp server pool ·························································································································· 78

display dhcp server statistics ··················································································································· 81

dns-list ······················································································································································ 83

domain-name ··········································································································································· 84

expired ····················································································································································· 84

forbidden-ip ·············································································································································· 85

forbidden-ip-range ···································································································································· 86

gateway-list ·············································································································································· 87

if-match ···················································································································································· 88

ip-in-use threshold ···································································································································· 90

nbns-list ···················································································································································· 91

netbios-type ·············································································································································· 92

network ····················································································································································· 93

next-server ··············································································································································· 94

option ······················································································································································· 95

reserve expired-ip enable ························································································································· 96

reserve expired-ip mode ·························································································································· 97

iii

reset dhcp server conflict ························································································································· 98

reset dhcp server expired ························································································································· 98

reset dhcp server ip-in-use ······················································································································· 99

reset dhcp server statistics ····················································································································· 100

snmp-agent trap enable dhcp server ····································································································· 100

static-bind ··············································································································································· 101

subnet alloc-mode ·································································································································· 102

subnet export-route disable ···················································································································· 103

subnet idle-time ······································································································································ 104

subnet mask-length ································································································································ 105

tftp-server domain-name ························································································································ 105

tftp-server ip-address ····························································································································· 106

valid class ··············································································································································· 107

verify class ············································································································································· 107

voice-config ············································································································································ 108

vpn-instance ··········································································································································· 109

DHCP relay agent commands ······················································································································· 110

dhcp relay always-unicast ······················································································································ 110

dhcp relay check mac-address ·············································································································· 110

dhcp relay check mac-address aging-time····························································································· 111

dhcp relay client-information record ······································································································· 112

dhcp relay client-information refresh ······································································································ 112

dhcp relay client-information refresh enable ·························································································· 113

dhcp relay dhcp-server timeout ·············································································································· 114

dhcp relay forward reply by-option82 ····································································································· 114

dhcp relay gateway ································································································································ 115

dhcp relay information circuit-id ············································································································· 116

dhcp relay information enable ················································································································ 118

dhcp relay information link-selection ······································································································ 119

dhcp relay information remote-id ············································································································ 120

dhcp relay information strategy ·············································································································· 121

dhcp relay insert option60 ······················································································································ 122

dhcp relay mac-forward enable ·············································································································· 123

dhcp relay master-server switch-delay ··································································································· 123

dhcp relay release ip ······························································································································ 124

dhcp relay request-from-tunnel discard·································································································· 124

dhcp relay server-address ······················································································································ 125

dhcp relay server-address algorithm ······································································································ 126

dhcp relay source-address ····················································································································· 127

dhcp-server timeout ······························································································································· 129

dhcp smart-relay enable ························································································································· 130

display dhcp relay check mac-address ·································································································· 130

display dhcp relay client-information ······································································································ 131

display dhcp relay information ················································································································ 133

display dhcp relay drni-status················································································································· 134

display dhcp relay server-address ········································································································· 135

display dhcp relay statistics ···················································································································· 136

gateway-list ············································································································································ 137

master-server switch-delay ···················································································································· 138

remote-server ········································································································································· 138

remote-server algorithm ························································································································· 139

reset dhcp relay client-information ········································································································· 140

reset dhcp relay statistics ······················································································································· 140

DHCP client commands ································································································································· 141

dhcp client dad enable ··························································································································· 141

dhcp client dscp ····································································································································· 141

dhcp client identifier ······························································································································· 142

display dhcp client ·································································································································· 143

ip address dhcp-alloc ····························································································································· 145

BOOTP client commands······························································································································· 146

display bootp client ································································································································· 146

ip address bootp-alloc ···························································································································· 147

iv

DNS commands ························································································ 148

display dns domain ································································································································ 148

display dns host ····································································································································· 149

display dns server ·································································································································· 150

display ipv6 dns server ··························································································································· 151

dns domain ············································································································································· 152

dns dscp ················································································································································· 153

dns host aging-time ································································································································ 153

dns proxy enable ···································································································································· 154

dns server ·············································································································································· 155

dns source-interface ······························································································································· 156

dns spoofing ··········································································································································· 157

dns trust-interface ·································································································································· 158

ip host ····················································································································································· 158

ipv6 dns dscp ········································································································································· 159

ipv6 dns server ······································································································································· 160

ipv6 dns spoofing ··································································································································· 161

ipv6 host ················································································································································· 162

reset dns host ········································································································································· 162

DDNS commands ······················································································ 164

ddns apply policy ···································································································································· 164

ddns dscp ··············································································································································· 165

ddns policy ············································································································································· 165

display ddns policy ································································································································· 166

interval ···················································································································································· 167

method ··················································································································································· 168

password ················································································································································ 169

ssl-client-policy ······································································································································· 170

url ··························································································································································· 171

username ··············································································································································· 173

Basic IP forwarding commands ································································· 174

display fib ··············································································································································· 174

forwarding arp-packet destination ·········································································································· 176

forwarding nd-packet destination ··········································································································· 176

forwarding hop-limit-exceeded destination····························································································· 177

forwarding hop-limit-unvaried destination ······························································································ 178

forwarding ttl-exceeded-packet destination···························································································· 179

forwarding ttl-unvaried destination ········································································································· 180

ip forwarding ··········································································································································· 180

ip forwarding ttl-unvaried ························································································································ 181

Fast forwarding commands ········································································ 182

display ip fast-forwarding aging-time ······································································································ 182

display ip fast-forwarding cache ············································································································· 182

display ip fast-forwarding fragcache ······································································································· 183

ip fast-forwarding aging-time ·················································································································· 184

ip fast-forwarding load-sharing ··············································································································· 185

reset ip fast-forwarding cache ················································································································ 185

Adjacency table commands ······································································· 186

display adjacent-table ···························································································································· 186

display ipv6 adjacent-table ····················································································································· 187

IRDP commands ······················································································· 190

ip irdp ····················································································································································· 190

ip irdp address ········································································································································ 190

ip irdp interval ········································································································································· 191

ip irdp lifetime ········································································································································· 192

ip irdp multicast ······································································································································ 192

v

ip irdp preference ··································································································································· 193

IP performance optimization commands ···················································· 194

display icmp statistics ····························································································································· 194

display ip statistics ································································································································· 195

display rawip ·········································································································································· 198

display rawip verbose ····························································································································· 199

display tcp ·············································································································································· 202

display tcp verbose ································································································································ 204

display udp ············································································································································· 208

display udp socket-loadbalance ············································································································· 209

display udp socket-loadbalance verbose ······························································································· 210

display udp statistics ······························································································································ 211

display udp verbose ······························································································································· 212

ip forward-broadcast ······························································································································ 216

ip icmp error-interval ······························································································································ 216

ip icmp fragment discarding ··················································································································· 217

ip icmp receive enable ··························································································································· 218

ip icmp send enable ······························································································································· 219

ip icmp source ········································································································································ 220

ip mtu ····················································································································································· 221

ip redirects enable ·································································································································· 222

ip ttl-expires enable ································································································································ 223

ip unreachables enable ·························································································································· 223

ip virtual-reassembly aging ···················································································································· 224

ip virtual-reassembly enable ·················································································································· 225

reset ip statistics ····································································································································· 226

reset udp statistics ································································································································· 226

tcp mss ··················································································································································· 227

tcp path-mtu-discovery ··························································································································· 228

tcp-proxy congestion-method ················································································································· 228

tcp syn-cookie enable ···························································································································· 229

tcp timer fin-timeout ································································································································ 230

tcp timer syn-timeout ······························································································································ 231

tcp window ············································································································································· 231

UDP helper commands ·············································································· 233

display udp-helper interface ··················································································································· 233

reset udp-helper statistics ······················································································································ 233

udp-helper broadcast-map ····················································································································· 234

udp-helper enable ·································································································································· 235

udp-helper multicast-map ······················································································································· 235

udp-helper port ······································································································································· 236

udp-helper server ··································································································································· 237

IPv6 basics commands ·············································································· 239

display ipv6 fib ········································································································································ 239

display ipv6 icmp statistics ····················································································································· 240

display ipv6 interface ······························································································································ 242

display ipv6 interface prefix ···················································································································· 246

display ipv6 pathmtu ······························································································································ 247

display ipv6 prefix ··································································································································· 248

display ipv6 rawip ··································································································································· 249

display ipv6 rawip verbose ····················································································································· 250

display ipv6 router-renumber statistics··································································································· 254

display ipv6 statistics ······························································································································ 255

display ipv6 tcp ······································································································································· 258

display ipv6 tcp verbose ························································································································· 259

display ipv6 udp ····································································································································· 264

display ipv6 udp verbose ························································································································ 265

ipv6 address ··········································································································································· 269

ipv6 address anycast ····························································································································· 269

vi

ipv6 address auto ··································································································································· 270

ipv6 address auto link-local ···················································································································· 271

ipv6 address eui-64 ································································································································ 272

ipv6 address link-local ···························································································································· 273

ipv6 address prefix-number ···················································································································· 274

ipv6 bandwidth-based-sharing ··············································································································· 275

ipv6 forwarding ······································································································································· 275

ipv6 hop-limit ·········································································································································· 276

ipv6 hoplimit-expires enable ··················································································································· 277

ipv6 icmpv6 error-interval ······················································································································· 277

ipv6 icmpv6 multicast-echo-reply enable ······························································································· 278

ipv6 icmpv6 receive enable ···················································································································· 279

ipv6 icmpv6 send enable ························································································································ 280

ipv6 icmpv6 source ································································································································ 281

ipv6 mtu ·················································································································································· 282

ipv6 pathmtu ··········································································································································· 283

ipv6 pathmtu age ···································································································································· 284

ipv6 prefer temporary-address ··············································································································· 284

ipv6 prefix ··············································································································································· 285

ipv6 reassemble local enable ················································································································· 286

ipv6 redirects enable ······························································································································ 286

ipv6 router-renumber enable ·················································································································· 287

ipv6 tcp-proxy congestion-method ········································································································· 287

ipv6 temporary-address ························································································································· 289

ipv6 unreachables enable ······················································································································ 290

ipv6 virtual-reassembly enable··············································································································· 290

reset ipv6 pathmtu ·································································································································· 291

reset ipv6 router-renumber statistics ······································································································ 292

reset ipv6 statistics ································································································································· 292

statistics l3-packet enable ······················································································································ 293

IPv6 neighbor discovery commands ·························································· 294

display ipv6 nd proxy statistics ··············································································································· 294

display ipv6 nd route-direct advertise ····································································································· 294

display ipv6 nd snooping count vsi········································································································· 296

display ipv6 nd snooping vsi ·················································································································· 296

display ipv6 nd user-ip-conflict record ···································································································· 297

display ipv6 nd user-move record ·········································································································· 299

display ipv6 neighbors ···························································································································· 300

display ipv6 neighbors count ·················································································································· 303

display ipv6 neighbors entry-limit ··········································································································· 303

display ipv6 neighbors statistics ············································································································· 304

display ipv6 neighbors usage ················································································································· 306

display ipv6 neighbors vpn-instance ······································································································ 307

ipv6 address duplicate-detect enable····································································································· 308

ipv6 address duplicate-detect interval ···································································································· 309

ipv6 nd autoconfig managed-address-flag ····························································································· 309

ipv6 nd autoconfig other-flag ·················································································································· 310

ipv6 nd dad attempts ······························································································································ 311

ipv6 nd ip-unique learning enable ·········································································································· 312

ipv6 nd mode uni ···································································································································· 312

ipv6 nd ns retrans-timer ························································································································· 313

ipv6 nd nud reachable-time ···················································································································· 314

ipv6 nd online-offline-log enable ············································································································ 314

ipv6 nd ra boot-file-url ···························································································································· 315

ipv6 nd ra dns search-list ······················································································································· 316

ipv6 nd ra dns search-list suppress········································································································ 317

ipv6 nd ra dns server ······························································································································ 318

ipv6 nd ra dns server suppress ·············································································································· 319

ipv6 nd ra halt ········································································································································· 320

ipv6 nd ra hop-limit unspecified ·············································································································· 321

ipv6 nd ra interval ··································································································································· 321

vii

ipv6 nd ra no-advlinkmtu ························································································································ 322

ipv6 nd ra prefix ······································································································································ 323

ipv6 nd ra prefix default ·························································································································· 324

ipv6 nd ra router-lifetime ························································································································ 325

ipv6 nd route-direct advertise ················································································································· 326

ipv6 nd route-direct advertise delay ······································································································· 327

ipv6 nd route-direct prefix convert-length ······························································································· 328

ipv6 nd router-preference ······················································································································· 329

ipv6 nd snooping enable global·············································································································· 329

ipv6 nd snooping enable link-local ········································································································· 330

ipv6 nd unsolicited-na-learning enable··································································································· 330

ipv6 nd user-ip-conflict record enable ···································································································· 331

ipv6 nd user-move record enable··········································································································· 332

ipv6 neighbor ·········································································································································· 333

ipv6 neighbor link-local minimize ··········································································································· 335

ipv6 neighbor stale-aging ······················································································································· 335

ipv6 neighbor timer stale-aging ·············································································································· 336

ipv6 neighbors max-learning-num ·········································································································· 337

local-proxy-nd enable ····························································································································· 338

proxy-nd enable ····································································································································· 338

proxy-nd span-segment enable·············································································································· 339

reset ipv6 nd snooping vsi ······················································································································ 340

reset ipv6 neighbors ······························································································································· 340

DHCPv6 commands ·················································································· 342

Common DHCPv6 commands ······················································································································· 342

display ipv6 dhcp duid ···························································································································· 342

ipv6 dhcp advertise pd-route ·················································································································· 342

ipv6 dhcp dscp ······································································································································· 343

ipv6 dhcp log enable ······························································································································ 343

ipv6 dhcp select ····································································································································· 344

DHCPv6 server commands···························································································································· 345

address range ········································································································································ 345

aftr-name ················································································································································ 346

class pool ··············································································································································· 347

default pool ············································································································································· 347

display ipv6 dhcp option-group ·············································································································· 348

display ipv6 dhcp pool ···························································································································· 350

display ipv6 dhcp prefix-pool ·················································································································· 353

display ipv6 dhcp server ························································································································· 355

display ipv6 dhcp server conflict ············································································································ 356

display ipv6 dhcp server database ········································································································· 356

display ipv6 dhcp server expired ············································································································ 357

display ipv6 dhcp server ip-in-use ·········································································································· 358

display ipv6 dhcp server pd-in-use ········································································································· 360

display ipv6 dhcp server statistics ·········································································································· 362

dns-server ·············································································································································· 364

domain-name ········································································································································· 365

if-match ·················································································································································· 365

ipv6 dhcp apply-policy ···························································································································· 367

ipv6 dhcp class ······································································································································· 368

ipv6 dhcp option-group ··························································································································· 369

ipv6 dhcp policy ······································································································································ 370

ipv6 dhcp pool ········································································································································ 370

ipv6 dhcp prefix-pool ······························································································································ 371

ipv6 dhcp server ····································································································································· 372

ipv6 dhcp server apply pool ··················································································································· 373

ipv6 dhcp server database filename ······································································································ 374

ipv6 dhcp server database update interval ···························································································· 376

ipv6 dhcp server database update now ································································································· 377

ipv6 dhcp server database update stop ································································································· 377

ipv6 dhcp server forbidden-address ······································································································· 378

viii

ipv6 dhcp server forbidden-prefix ··········································································································· 379

ipv6 dhcp server multi-ip per-mac enable ······························································································ 380

network ··················································································································································· 380

option ····················································································································································· 382

option-group ··········································································································································· 383

prefix-pool ·············································································································································· 384

reset ipv6 dhcp server conflict················································································································ 385

reset ipv6 dhcp server expired ··············································································································· 385

reset ipv6 dhcp server ip-in-use ············································································································· 386

reset ipv6 dhcp server pd-in-use ············································································································ 387

reset ipv6 dhcp server statistics ············································································································· 387

sip-server ··············································································································································· 388

static-bind ··············································································································································· 389

suboption ················································································································································ 390

temporary address range ······················································································································· 391

vendor-specific ······································································································································· 392

vpn-instance ··········································································································································· 393

DHCPv6 relay agent commands ···················································································································· 393

display ipv6 dhcp relay client-information address················································································· 393

display ipv6 dhcp relay client-information pd ························································································· 395

display ipv6 dhcp relay drni-status ········································································································· 397

display ipv6 dhcp relay server-address ·································································································· 398

display ipv6 dhcp relay statistics ············································································································ 399

gateway-list ············································································································································ 401

ipv6 dhcp client-detect ··························································································································· 402

ipv6 dhcp relay client-information record ······························································································· 402

ipv6 dhcp relay client-link-address enable ····························································································· 403

ipv6 dhcp relay gateway ························································································································· 404

ipv6 dhcp relay interface-id ···················································································································· 404

ipv6 dhcp relay release-agent ················································································································ 405

ipv6 dhcp relay request-from-tunnel discard ·························································································· 406

ipv6 dhcp relay server-address ·············································································································· 406

ipv6 dhcp relay source-address ············································································································· 407

remote-server ········································································································································· 408

reset ipv6 dhcp relay client-information address ···················································································· 409

reset ipv6 dhcp relay client-information pd ····························································································· 410

reset ipv6 dhcp relay statistics ··············································································································· 410

DHCPv6 client commands ····························································································································· 411

display ipv6 dhcp client ·························································································································· 411

display ipv6 dhcp client statistics ··········································································································· 413

ipv6 address dhcp-alloc ························································································································· 414

ipv6 dhcp client dscp ······························································································································ 415

ipv6 dhcp client duid ······························································································································· 416

ipv6 dhcp client pd ································································································································· 417

ipv6 dhcp client stateful ·························································································································· 417

ipv6 dhcp client stateless enable ··········································································································· 418

reset ipv6 dhcp client statistics ··············································································································· 419

IPv6 fast forwarding commands ································································· 420

display ipv6 fast-forwarding aging-time ·································································································· 420

display ipv6 fast-forwarding cache ········································································································· 420

ipv6 fast-forwarding aging-time ·············································································································· 421

ipv6 fast-forwarding load-sharing ··········································································································· 422

reset ipv6 fast-forwarding cache ············································································································ 423

IPv6 transition technologies commands ····················································· 424

tunnel ipv6-fragmentation-check enable ································································································ 424

Document conventions and icons ······························································ 425

Conventions ··················································································································································· 425

Network topology icons ·································································································································· 426

ix

Support and other resources ····································································· 427

Accessing Hewlett Packard Enterprise Support····························································································· 427

Accessing updates ········································································································································· 427

Websites ················································································································································ 428

Customer self repair ······························································································································· 428

Remote support ······································································································································ 428

Documentation feedback ······················································································································· 428

Index ·········································································································· 430

1

ARP commands

arp check enable

Use arp check enable to enable dynamic ARP entry check.

Use undo arp check enable to disable dynamic ARP entry check.

Syntax

arp check enable

undo arp check enable

Default

Dynamic ARP entry check is enabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Dynamic ARP entry check disables a device from supporting dynamic ARP entries with multicast

MAC addresses. The device cannot learn dynamic ARP entries containing multicast MAC addresses.

You cannot manually add static ARP entries that contain multicast MAC addresses.

When dynamic ARP entry check is disabled, ARP entries containing multicast MAC addresses are

supported. The device can learn dynamic ARP entries containing multicast MAC addresses obtained

from the ARP packets sourced from a unicast MAC address. You can also manually add static ARP

entries containing multicast MAC addresses.

Examples

# Enable dynamic ARP entry check.

<Sysname> system-view

[Sysname] arp check enable

arp check log enable

Use arp check log enable to enable the ARP logging feature.

Use undo arp check log enable to disable the ARP logging feature.

Syntax

arp check log enable

undo arp check log enable

Default

ARP logging is disabled.

Views

System view

2

Predefined user roles

network-admin

Usage guidelines

This feature enables a device to log ARP events when ARP cannot resolve IP addresses correctly.

The log information helps administrators locate and solve problems. The device can log the following

ARP events:

•

On a proxy ARP-disabled interface, the target IP address of a received ARP packet is not one of

the following IP addresses:

 The IP address of the receiving interface.

 The virtual IP address of the VRRP group.

•

The sender IP address of a received ARP reply conflicts with one of the following IP addresses:

 The IP address of the receiving interface.

 The virtual IP address of the VRRP group.

The device sends ARP log messages to the information center. You can use the info-center

source command to specify the log output rules for the information center. For more information

about information center, see System Management Configuration Guide.

The device can generate a large number of ARP logs. To conserve system resources, enable ARP

logging only when you are auditing or troubleshooting ARP events.

Examples

# Enable ARP logging.

<Sysname> system-view

[Sysname] arp check log enable

arp ip-unique learning enable

Use arp ip-unique learning enable to enable unique ARP entry learning for the device to

learn only one ARP entry for one IP address.

Use undo arp ip-unique learning enable to disable unique ARP entry learning for IP

addresses.

Syntax

arp ip-unique learning enable

undo arp ip-unique learning enable

Default

Unique ARP entry learning for IP addresses is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Application scenarios

Unique ARP entry learning enables the device to learn only one ARP entry for one IP address. This

feature prevents traffic loss that might occur in the IP numbered scenario because two ARP entries

exist for an endpoint after it moves between interfaces of the same IP address.

3

After you configure one interface to borrow an IP address from another interface by using the ip

address unnumbered command, the two interfaces have the same IP address. If an endpoint

moves from one of the interfaces to another with its IP address unchanged, the device will learn a

new ARP entry for the same IP address with a different interface than the ARP entry learned before

endpoint movement. This will cause loss of packets destined for the endpoint, because the FIB entry

for the endpoint is generated based on the ARP entry generated earlier for it.

Operating mechanism

With unique ARP entry learning enabled, the device deletes the existing ARP entry for an IP address

when it learns a new ARP entry with a different interface than the existing entry for that IP address.

This ensures that the outgoing interface in the FIB entry for the client is the one to which the endpoint

is attached.

Examples

# Enable unique ARP entry learning.

<Sysname> system-view

[Sysname] arp ip-unique learning enable

Related commands

ip address unnumbered

arp ip-unnumbered learning enable

Use arp ip-unnumbered learning enable to enable an IP unnumbered interface to learn

ARP entries for different subnets.

Use undo arp ip-unnumbered learning enable to disable an IP unnumbered interface

from learning ARP entries for different subnets.

Syntax

arp ip-unnumbered learning enable [ source-address ip-address ]

undo arp ip-unnumbered learning enable

Default

An IP unnumbered interface cannot learn ARP entries for different subnets.

Views

Interface view

Predefined user roles

network-admin

Parameters

source-address ip-address: Specifies the sender IP address in an ARP request sent by the

IP unnumbered interface. If you do not specify this option, the sender IP address in the ARP request

is the borrowed IP address.

Usage guidelines

Application scenarios

An IP unnumbered interface might be unable to learn the ARP entry for the peer device if the

unnumbered interface and the remote device are on different subnets. This is because some devices

treat an ARP request as illegal and do not return a reply if the sender and target IP addresses in that

ARP request are on different subnets.

4

To ensure communication between them, use this feature on the IP unnumbered interface to specify

a sender IP address on the same subnet as the IP address of the peer interface on the remote

device.

Restrictions and guidelines

This feature takes effect only on IP unnumbered interfaces, which are configured with the ip

address unnumbered command.

To avoid ARP learning anomalies, do not execute the arp ip-unnumbered learning enable

command on a non-IP-unnumbered interface.

If you disable an IP unnumbered interface from learning ARP entries for different subnets, the device

deletes the existing ARP entries learned for different subnets after they age out.

Examples

# Configure HundredGigE 1/0/1 to borrow the IP address of HundredGigE 1/0/2, and enable

HundredGigE 1/0/1 to learn ARP entries for different subnets.

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] ip address unnumbered interface hundredgige 1/0/2

[Sysname-HundredGigE1/0/1] arp ip-unnumbered learning enable

Related commands

ip address unnumbered

arp mac-interface-consistency check enable

Use arp mac-interface-consistency check enable to enable interface consistency

check between ARP and MAC address entries.

Use undo arp mac-interface-consistency check enable to disable interface

consistency check between ARP and MAC address entries.

Syntax

arp mac-interface-consistency check enable

undo arp mac-interface-consistency check enable

Default

Interface consistency check between ARP and MAC address entries is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

In an unstable network, the receiving interface for packets from a user might change. The interface in

the MAC address entry can be updated immediately while the interface in the ARP entry cannot. In

this case, the packets matching the ARP entry will be sent out of an incorrect interface. To solve this

problem, you can use this feature to periodically check the interface consistency between the ARP

and MAC address entry for a user. If the interfaces are not the same, ARP sends ARP requests in the

VLAN of the ARP entry and updates the entry with the ARP reply receiving interface.

Use the display mac-address command to display MAC address entries.

5

Examples

# Enable interface consistency check between ARP and MAC address entries.

<Sysname> system-view

[Sysname] arp mac-interface-consistency check enable

Related commands

display mac-address (Layer 2—LAN Switching Command Reference)

arp max-learning-num

Use arp max-learning-num to set the dynamic ARP learning limit for an interface.

Use undo arp max-learning-num to restore the default.

Syntax

arp max-learning-num max-number

undo arp max-learning-num

Default

An interface can learn a maximum of 747520 dynamic ARP entries.

Views

Layer 2 Ethernet interface view

Layer 2 aggregate interface view

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

Layer 3 aggregate interface view

Layer 3 aggregate subinterface view

VXLAN VSI interface view

VLAN interface view

Predefined user roles

network-admin

Parameters

max-number: Specifies the maximum number of dynamic ARP entries for an interface. The value

range for this argument is 0 to 747520.

Usage guidelines

An interface can dynamically learn ARP entries. To prevent an interface from holding too many ARP

entries, you can set the maximum number of dynamic ARP entries that the interface can learn. When

the maximum number is reached, the interface stops learning ARP entries.

When the number argument is set to 0, the interface is disabled from learning dynamic ARP entries.

Examples

# Specify VLAN-interface 40 to learn a maximum of 10 dynamic ARP entries.

<Sysname> system-view

[Sysname] interface vlan-interface 40

[Sysname-Vlan-interface40] arp max-learning-num 10

# Specify HundredGigE 1/0/1 to learn a maximum of 10 dynamic ARP entries.

6

<Sysname> system-view

[Sysname] interface hundredgige 1/0/1

[Sysname-HundredGigE1/0/1] arp max-learning-num 10

# Specify Layer 2 aggregate interface Bridge-Aggregation 1 to learn a maximum of 10 dynamic ARP

entries.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] arp max-learning-num 10

# Specify Layer 3 aggregate interface Route-Aggregation 1 to learn a maximum of 10 dynamic ARP

entries.

<Sysname> system-view

[Sysname] interface route-aggregation 1

[Sysname-Route-Aggregation1] arp max-learning-num 10

arp max-learning-number

Use arp max-learning-number to set the dynamic ARP learning limit for a device.

Use undo arp max-learning-number to restore the default.

Syntax

arp max-learning-number max-number slot slot-number

undo arp max-learning-number slot slot-number

Default

The device can learn a maximum of 747520 dynamic ARP entries.

Views

System view

Predefined user roles

network-admin

Parameters

max-number: Specifies the maximum number of dynamic ARP entries for a device. The value

range for this argument is 0 to 90112.

slot slot-number: Specifies a card by its slot number.

Usage guidelines

A device can dynamically learn ARP entries. To prevent a device from holding too many ARP entries,

you can set the maximum number of dynamic ARP entries that the device can learn. When the

maximum number is reached, the device stops learning ARP entries.

When the number argument is set to 0, the device is disabled from learning dynamic ARP entries.

Examples

# Configure the device to learn a maximum of 64 dynamic ARP entries.

<Sysname> system-view

[Sysname] arp max-learning-number 64

arp mode uni

Use arp mode uni to configure a port as a customer-side port.

7

Use undo arp mode to restore the default.

Syntax

arp mode uni

undo arp mode

Default

A port operates as a network-side port.

Views

VLAN interface view

VXLAN VSI interface view

Predefined user roles

network-admin

Usage guidelines

By default, the device associates an ARP entry with routing information when the device learns an

ARP entry. The ARP entry provides the next hop information for routing. To save hardware resources,

you can use this command to specify a port that connects to a user terminal as a customer-side port.

The device will not associate the routing information with the learned ARP entries.

Examples

# Configure VLAN-interface 2 as a customer-side port.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] arp mode uni

arp static

Use arp static to configure a static ARP entry.

Use undo arp to delete an ARP entry.

Syntax

arp static ip-address mac-address [ vlan-id interface-type

interface-number | vsi-interface vsi-interface-id tunnel number vsi

vsi-name | vsi-interface vsi-interface-id interface-type

interface-number service-instance instance-id vsi vsi-name ]

[ vpn-instance vpn-instance-name ] [ description text ]

undo arp ip-address [ vpn-instance-name ]

Default

No static ARP entries exist.

Views

System view

Predefined user roles

network-admin

Parameters

ip-address: Specifies an IP address for the static ARP entry.

mac-address: Specifies a MAC address for the static ARP entry, in the format of H-H-H.

8

vlan-id: Specifies the ID of a VLAN to which the static ARP entry belongs. The value range is 1 to

4094.

interface-type interface-number: Specifies an interface by its type and number.

vsi-interface vsi-interface-id: Specifies a VSI interface by its number. The value for the

vsi-interface-id argument can be 1 or 17.

tunnel number: Specifies a tunnel interface by its number. The value for the number argument

can be 0 to 7, 9, 11, 17, 45, 77, 79, or 100.

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters.

service-instance instance-id: Specifies an Ethernet service instance by its ID in the range

of 1 to 4096. You must specify this option if you specify a Layer 2 Ethernet interface for the preceding

interface-type interface-number arguments. You cannot specify this option if you specify

an interface of other types for the preceding interface-type interface-number argument.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the static

ARP entry belongs. The vpn-instance-name argument represents the VPN instance name, a

case-sensitive string of 1 to 31 characters. The VPN instance must already exist. To specify a static

ARP entry on the public network, do not specify this option.

description text: Specifies a description of the static ARP entry. The value is a case-sensitive

string of 1 to 255 characters.

Usage guidelines

A static ARP entry is manually configured and maintained. It does not age out and cannot be

overwritten by any dynamic ARP entry.

Static ARP entries can be short or long.

A resolved short static ARP entry becomes unresolved upon certain events, for example, when the

resolved output interface goes down, or the corresponding VLAN or VLAN interface is deleted.

Long static ARP entries are effective or ineffective. Ineffective long static ARP entries cannot be

used for packet forwarding. A long static ARP entry is ineffective when any of the following conditions

exists:

•

The IP address in the entry conflicts with a local IP address.

•

No local interface has an IP address in the same subnet as the IP address in the ARP entry.

If you specify the vlan-id interface-type interface-number argument, follow these

restrictions and guidelines:

•

The interface can be an Ethernet interface or an aggregate interface.

•

The VLAN and VLAN interface must already exist. The specified Ethernet interface must belong

to the specified VLAN.

•

The IP address of the VLAN interface and the IP address specified by the ip-address

argument must be on the same network.

•

A long static ARP entry in a VLAN is deleted if the VLAN or VLAN interface is deleted.

On a VXLAN IP gateway that forwards traffic among VXLANs through VXLAN tunnels, a VSI

interface can act as the gateway for multiple VXLANs. The VSI interface (input interface) might be

connected to multiple VXLAN tunnel interfaces (output interfaces). In this case, you must specify the

vsi-interface vsi-interface-id tunnel number vsi vsi-name parameters to

identify a VSI interface-VSI-VXLAN tunnel interface binding. For more information about VSI

interfaces, VSI, and VXLAN tunnel interfaces, see VXLAN Configuration Guide.

On a VXLAN IP gateway that forwards traffic from multiple local sites to remote sites, a VSI interface

can act as the gateway for multiple local sites. The VSI interface (input interface) might be

associated with multiple Ethernet services (output interfaces) on Layer 2 Ethernet interfaces through

which the VSI interface connects to the local sites. In this case, you must specify the

9

vsi-interface vsi-interface-id interface-type interface-number

service-instance instance-id vsi vsi-name parameters to identify a VSI

interface-Layer 2 Ethernet interface-Ethernet service instance-VSI binding. For more information

about VSI interfaces, VSI, and Ethernet service instances, see VXLAN Configuration Guide.

Examples

# Configure a long static ARP entry that contains IP address 202.38.10.2, MAC address

00e0-fc01-0000, and output interface HundredGigE 1/0/1 in VLAN 10.

<Sysname> system-view

[Sysname] arp static 202.38.10.2 00e0-fc01-0000 10 hundredgige 1/0/1

# Configure a long static ARP entry that contains IP address 1.1.1.1, MAC address 00e0-fc01-0000,

input interface VSI-interface 1, output interface Tunnel 1, and VSI a.

<Sysname> system-view

[Sysname] arp static 1.1.1.1 00e0-fc01-0000 vsi-interface 1 tunnel 1 vsi a

# Configure a long static ARP entry that contains IP address 1.1.1.1, MAC address 00e0-fc01-0000,

input interface VSI-interface 1, output interface Ethernet instance 1 on HundredGigE 1/0/1, and VSI

a.

<Sysname> system-view

[Sysname] arp static 1.1.1.1 00e0-fc01-0000 vsi-interface 1 hundredgige 1/0/1 service-in

stance 1 vsi a

Related commands

display arp

reset arp

arp timer aging

Use arp timer aging to set the aging timer for dynamic ARP entries.

Use undo arp timer aging to restore the default.

Syntax

arp timer aging { aging-minutes | second aging-seconds }

undo arp timer aging

Default

In system view, the aging timer for dynamic ARP entries is 20 minutes.

In interface view, the aging timer for dynamic ARP entries is that set in system view.

Views

System view

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

Layer 3 aggregate interface view

Layer 3 aggregate subinterface view

VSI interface view

VLAN interface view

Predefined user roles

network-admin

Page is loading ...

Aruba JH345A Reference guide

Aruba JH345A Reference guide

Related papers

Other documents