4.1. ARP Commands

4.1.1. arp

Command Purpose

To add a permanent entry in the Address Resolution Protocol (ARP) cache, use the arp command in Global Config mode.

To remove an entry from the ARP cache, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

arp ( vrf VRF-NAME | ) IP-ADDRESS HARDWARE-ADDRESS

no arp ( vrf VRF-NAME | ) IP-ADDRESS

Parameter

Parameter Description

Parameter Value

vrf VRF-NAME

Virtual Routing and Forwarding (VRF) instance. The vrf-name argument is the name of the VRF table

String with up to 15 characters

IP-ADDRESS

IP address in four-part dotted decimal format corresponding to the local data-link address

IPv4 Address

HARDWARE-ADDRESS

Local data-link address (a 48-bit address)

MAC Address

Command Mode

Global Config

Default

No entries are permanently installed in the ARP cache.

Usage

Because most hosts support dynamic resolution, you generally need not specify static ARP cache entries.

To remove all none static entries from the ARP cache, use the clear arp-cache privileged EXEC command.

Examples

The following is an example of add a static ARP entry for a typical Ethernet host:

Switch# configure terminal
Switch(config)# arp 10.31.7.19 0058.3f00.1834

4.1.2. arp retry-interval

Command Purpose

When an interface requests a mapping for an address not in the cache, system will send ARP request message on the associated network requesting the address mapping. Usually, 3 request messages will be sent until the system got a response. To configure the ARP request delay interval between 2 messages, use arp retry-interval command in interface configuration mode. To restore the default value, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

arp retry-interval SECONDS

no arp retry-interval

Parameter

Parameter Description

Parameter Value

SECONDS

Time (in seconds) that an ARP request delay to interface

0-3 seconds

Command Mode

Interface Configuration

Default

1 second

Usage

This command is ignored when issued on interfaces that do not use ARP. The show interface EXEC command displays the ARP retry interval value. The value as seen in the following example from the show interface command:

ARP timeout 01:00:00, ARP retry interval 1s

Examples

The following example sets the ARP retry interval to 3 seconds:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# no switchport
Switch(config-if)# arp retry-interval 3

Related Commands

show interface

4.1.3. arp timeout

Command Purpose

Use this command to set the arp timeout value. Use the no form of this command to restore the default value.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

arp timeout SECONDS

no arp timeout

Parameter

Parameter Description

Parameter Value

SECONDS

Time (in seconds) that an entry remains in the ARP cache. <1-2147483>

1-2147483 seconds

Command Mode

Interface Configuration

Default

3600 seconds (1 hour)

Usage

This command is ignored when issued on interfaces that do not use ARP. The show interface EXEC command displays the ARP timeout value. The value as seen in the following example from the show interface command:

ARP timeout 01:00:00, ARP retry interval 1s

Examples

The following example sets the ARP timeout to 1200 seconds to allow entries to time out more quickly than the default:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# no switchport
Switch(config-if)# arp timeout 1200

Related Commands

show interface

4.1.4. arp as-layer-3 enable

Command Purpose

To set that deal with the arp packet as layer3 packet. To disable arp as-layer-3, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

arp as-layer-3 enable

no arp as-layer-3 enable

Command Mode

Global Config

Default

Disable

Usage

vlan classifier and IGMP Snooping affected by the CLI.

Enable, vlan classifier activate base ip, the arp packet matched source ip address will classifier to specified vlan. Otherwise, not classifier to specified vlan.

Enable, ip source guard enable the ip check on the port, the arp packet matched source ip address will not filter. Ohterwise, will filter.

Examples

The following example show how to enable arp as-layer-3:

Switch# configure terminal
Switch(config)# arp as-layer-3 enable

Related Commands

N/A

4.1.5. arp fake global enable

Command Purpose

To enable fake arp global, use the no form of this command.To disable arp fake global, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

arp fake global enable

no arp fake global enable

Command Mode

Global Config

Default

Disable

Usage

Not effect until both enable global and interface arp fake.

Examples

The following example show how to enable global fake arp:

Switch# configure terminal
Switch(config)# arp fake global enable

Related Commands

arp fake enable

4.1.6. arp fake enable

Command Purpose

To enable fake arp on interface, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

arp fake enable

no arp fake enable

Command Mode

Interface Configuration

Default

Enable

Usage

If enable, the interface receive IP packets that not match any ARP entry will create an fake ARP entry. Before interface received ARP reply, the IP packets matched the fake ARP entry will be dropped. After interface received ARP reply, will create active ARP entry instead of fake ARP entry.

Examples

The following example show how to enable fake arp:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# arp fake enable

Related Commands

arp fake global enable

4.1.7. arp fake timeout

Command Purpose

To configure how long a fake entry remains in the ARP cache, use the arp fake timeout command in interface configuration mode. To restore the default value, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

arp fake timeout SECONDS

no arp fake timeout

Parameter

Parameter Description

Parameter Value

SECONDS

Time that a fake entry remains in the ARP cache.

1-36000, unit:second

Command Mode

Interface Configuration

Default

5 seconds

Usage

When switch was attached, can let the fake ARP entry to time out later.

Examples

The following example sets the ARP fake timeout to 100 seconds to allow entries to time out:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# arp fake timeout 100

Related Commands

N/A

4.1.8. clear arp-cache

Command Purpose

To refresh dynamically created entries from the Address Resolution Protocol (ARP) cache, use the clear arp-cache command in privileged EXEC mode.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

clear arp-cache ( ( vrf VRF-NAME | ) interface IFNAME | )

Parameter

Parameter Description

Parameter Value

vrf VRF-NAME

(Optional) Refreshes only the ARP table entries for the specified Virtual Private Network (VPN) routing and forwarding (VRF) instance

String with up to 15 characters

IFNAME

(Optional) Refreshes only the ARP table entries associated with this interface

Supportphysical/aggregation/loopback/vlan/tunnelports

Command Mode

Privileged EXEC

Default

No default behavior or values.

Usage

This command updates the dynamically learned IP address and MAC address mapping information in the ARP table to ensure the validity of those entries. If the refresh operation encounters any stale entries (dynamic ARP entries that have expired but have not yet been aged out by an internal, timer-driven process), those entries are aged out of the ARP table immediately as opposed to at the next refresh interval.

Use this command without any arguments or keywords to refresh all ARP cache entries for all enabled interfaces.

Examples

The following example shows how to refresh all dynamically learned ARP cache entries for all enabled interfaces:

Switch# clear arp-cache

Related Commands

show ip arp

4.1.9. clear ip arp

Command Purpose

To refresh the specific dynamically created entry from the Address Resolution Protocol (ARP) cache, use the clear ip arp command in privileged EXEC mode.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

clear ip arp ( vrf VRF-NAME | ) IP-ADDRESS

Parameter

Parameter Description

Parameter Value

vrf VRF-NAME

(Optional) Refreshes only the ARP table entries for the specified Virtual Private Network (VPN) routing and forwarding (VRF) instance

String with up to 15 characters

IP-ADDRESS

(Optional) Refreshes only the ARP table entries associated with this IP address

-

Command Mode

Privileged EXEC

Default

No default behavior or values.

Usage

This command updates the specific dynamically learned IP address and MAC address mapping information in the ARP table. If the refresh operation encounters any stale entries (dynamic ARP entries that have expired but have not yet been aged out by an internal, timer-driven process), the entry is aged out of the ARP table immediately as opposed to at the next refresh interval.

Examples

The following example shows how to refresh the dynamically learned ARP entries 10.10.10.10:

Switch# clear ip arp 10.10.10.10

Related Commands

show ip arp

4.1.10. clear ip arp statistics

Command Purpose

To clear ARP packets statistics processed by system, use the clear ip arp statistics command in privileged EXEC mode.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

clear ip arp ( vrf VRF-NAME | ) statistics

Parameter

Parameter Description

Parameter Value

vrf VRF-NAME

(Optional) Clear ARP statistics for the specified Virtual Private Network (VPN) routing and forwarding (VRF) instance

String with up to 15 characters

Command Mode

Privileged EXEC

Default

No default behavior or values.

Usage

This command use to clear ARP packets statistics.

Examples

The following example shows how to clear ARP packets statistcs:

Switch# clear ip arp statistics

Related Commands

show ip arp summary

4.1.11. show ip arp

Command Purpose

To display the entries in the Address Resolution Protocol (ARP) table, use the show ip arp command in privileged EXEC mode.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show ip arp ( ( vrf VRF-NAME | ) interface INTERFACE-NAME | )

Parameter

Parameter Description

Parameter Value

vrf VRF-NAME

(Optional) Displays the entries under the Virtual Private Network (VPN) routing and forwarding (VRF) instance specified by the vrf-name argument

String with up to 15 characters

INTERFACE-NAME

(Optional) Refreshes only the ARP table entries associated with this interface

-

Command Mode

Privileged EXEC

Default

None

Usage

To display all entries in the ARP cache, use this command without any arguments or keywords.

Examples

The following is sample output from the show ip arp command:

Switch# show ip arp

Protocol Address Age (min) Hardware Addr Interface
Internet 1.1.1.1 - 0058.3f57.0c00 eth-0-1
Internet 2.2.2.1 - 0058.3f57.0c00 eth-0-2
Internet 3.3.3.1 - 0058.3f57.0c00 eth-0-3
Internet 10.0.20.1 - 0058.3f57.0c00 eth-0-10
Internet 10.0.20.254 - 0058.3f00.0101 eth-0-10

Related Commands

clear ip arp

4.1.12. show ip arp summary

Command Purpose

To display the total number of Address Resolution Protocol (ARP) table entries, the number of ARP table entries for each ARP entry mode, and the number of ARP table entries for each interface on the router, use the show ip arp summary command in privileged EXEC mode.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show ip arp ( vrf VRF-NAME | ) summary

Parameter

Parameter Description

Parameter Value

vrf VRF-NAME

(Optional) Displays the entries under the Virtual Private Network (VPN) routing and forwarding (VRF) instance specified by the vrf-name argument

String with up to 15 characters

Command Mode

Privileged EXEC

Default

None

Usage

Use this command to display high-level statistics about the ARP table entries:

Examples

The following is sample output from the show ip arp summary command:

Switch# show ip arp summary

Gratuitous ARP learning is disabled
2 IP ARP entries, with 0 of them incomplete
(Static:1, Dyamic:0, Interface:1)
ARP Pkt Received is: 0
ARP Pkt Send number is: 1
ARP Pkt Dicard number is: 0

Related Commands

clear ip arp statistics

4.1.13. debug arp

Command Purpose

To turn on the ARP debug, use debugs arp command in EXEC mode. To turn off the ARP debug, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

debug arp ( vrf VRF-NAME | )

Parameter

Parameter Description

Parameter Value

vrf VRF-NAME

(Optional) Displays the entries under the Virtual Private Network (VPN) routing and forwarding (VRF) instance specified by the vrf-name argument

String with up to 15 characters

Command Mode

Privileged EXEC

Default

None

Usage

Use this command to debug ARP packets received and send; also for debug ARP entry creating, updating and deleting.

Examples

The following is sample output from the debug arp command:

Switch# debug arp

Sep  7 03:34:08 SWITCH ARP-7: IP ARP: creating entry for IP address: 7.7.7.7, hw: e64d。0445。df00 
Sep  7 03:34:08 SWITCH ARP-7: IP ARP: send req src 7.7.7.7 e64d。0445。df00, dst 7.7.7.7 eth-0-1

Related Commands

show debugging arp

4.1.14. show debugging arp

Command Purpose

To display the debugging status of ARP, use the show debugging arp command in EXEC mode.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show debugging arp ( vrf VRF-NAME | )

Parameter

Parameter Description

Parameter Value

vrf VRF-NAME

(Optional) Displays the entries under the Virtual Private Network (VPN) routing and forwarding (VRF) instance specified by the vrf-name argument

String with up to 15 characters

Command Mode

Privileged EXEC

Default

None

Usage

Use this command to display the debugging status of ARP.

Examples

The following is sample output from the show debugging arp command:

Switch# show debugging arp

ARP debugging status:
ARP packet debugging is on

Related Commands

debug arp

4.1.15. proxy-arp enable

Command Purpose

The switch uses proxy ARP to help hosts determine MAC addresses of hosts on other networks or subnets.

To enable proxy Address Resolution Protocol (ARP) on an interface, use the proxy-arp enable command in interface configuration mode. To disable proxy ARP on the interface, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

proxy-arp enable

Command Mode

Interface Configuration

Default

Proxy ARP is disabled by default.

Usage

When proxy ARP is disabled, a device will respond to ARP requests received on its interface only if the target IP address is the same as its IP address.

Examples

The following example enables proxy ARP on interface eth-0-1:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# no switchport
Switch(config-if)# no shutdown
Switch(config-if)#ip address 1.1.1.1/24
Switch(config-if)# proxy-arp enable

Related Commands

local-proxy-arp enable

4.1.16. local-proxy-arp enable

Command Purpose

The local proxy ARP feature allow the L3 Device to response ARP request whose ARP Target address is in the same subnet the as the ARP request comes from (No Routing is required).

To enable local proxy Address Resolution Protocol (ARP) on an interface, use the local-proxy-arp enable command in interface configuration mode.

To disable proxy ARP on the interface, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

local-proxy-arp enable

no local-proxy-arp enable

Command Mode

Interface Configuration

Default

Local proxy ARP is disabled by default.

Usage

Internet Control Message Protocol (ICMP) redirects are disabled on interfaces when the local proxy ARP feature is enabled. The main condition we need to enable local ARP proxy is that the switch enables port isolate.

Examples

The following example enables local proxy ARP on interface eth-0-1:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# no switchport
Switch(config-if)# no shutdown
Switch(config-if)# ip address 1.1.1.1/24
Switch(config-if)# local-proxy-arp enable

Related Commands

proxy-arp enable

4.1.17. gratuitous-arp-learning enable

Command Purpose

To enable the gratuitous Address Resolution Protocol (ARP) control on the router, use the gratuitous-arp-learning enable command in Global Config mode. To disable the ARP control, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

gratuitous-arp-learning enable

no gratuitous-arp-learning enable

Command Mode

Global Config

Default

Gratuitous ARP learning is disabled by default.

Usage

None

Examples

The following example enables gratuitous ARP learning on interface eth-0-1:

Switch# configure terminal
Switch(config)# gratuitous-arp-learning enable

Related Commands

show ip arp summary

4.1.18. gratuitous-arp send interval

Command Purpose

To config the gratuitous ARP send interval, use the no form of this command to recover to default.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

arp gratuitous-arp send interval SECONDS

no arp gratuitous-arp send interval

Parameter

Parameter Description

Parameter Value

SECONDS

The interval in seconds to send gratuitous ARP

1-86400 seconds

Command Mode

Interface Configuration

Default

60 seconds

Usage

None

Examples

The following example config gratuitous ARP send interval on interface eth-0-1:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# no switchport
Switch(config-if)# no shutdown
Switch(config-if)#ip address 1.1.1.1/24
Switch(config-if)#arp gratuitous-arp send interval 80

Related Commands

arp gratuitous-arp send enable

4.1.19. gratuitous-arp send enable

Command Purpose

To enable the gratuitous ARP send on the interface.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

arp gratuitous-arp send enable

no arp gratuitous-arp send enable

Command Mode

Interface Configuration

Default

disbale

Usage

None

Examples

The following example enable gratuitous ARP oninterface eth-0-1:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# no switchport
Switch(config-if)# no shutdown
Switch(config-if)#ip address 1.1.1.1/24
Switch(config-if)#arp gratuitous-arp send enable

Related Commands

arp gratuitous-arp send interval