CE12808 MAC 刷新arp 不生效

发布时间:  2017-03-14 浏览次数:  278 下载次数:  0
问题描述

CE12808 配置mac-address update arp enable  测试不生效
处理过程

测试过程如下:

 GE1/7/0/14 下挂设备中接一台mac地址为xxxx-xxxx-40fc的pc

[CE12808]dis mac-address | include xxxx-xxxx-40fc
---- Flags: * - Backup 
     BD: bridge-domain
-------------------------------------------------------------------------------
MAC Address    VLAN/VSI/BD                       Learned-From        Type
-------------------------------------------------------------------------------
xxxx-xxxx-40fc 101/-/-                           GE1/7/0/14          dynamic 
-------------------------------------------------------------------------------

[CE12808]dis arp | include xxxx-xxxx-40fc
ARP Entry Types: D - Dynamic, S - Static, I - Interface
EXP: Expire-time

IP ADDRESS      MAC ADDRESS    EXP(M) TYPE/VLAN INTERFACE       VPN-INSTANCE
------------------------------------------------------------------------------
10.111.65.22    xxxx-xxxx-40fc   20   D/101     GE1/7/0/14      
------------------------------------------------------------------------------
Total:404         Dynamic:334       Static:0    Interface:70

然后把mac地址9890-96b2-40fc 的pc 接到Eth-Trunk107 接口下的设备

[CE12808]dis mac-address | include xxxx-xxxx-40fc
---- Flags: * - Backup 
     BD: bridge-domain
-------------------------------------------------------------------------------
MAC Address    VLAN/VSI/BD                       Learned-From        Type
-------------------------------------------------------------------------------
xxxx-xxxx-40fc 101/-/-                           GE1/7/0/14          dynamic 
xxxx-xxxx-40fc 999/-/-                           Eth-Trunk107        dynamic 
-------------------------------------------------------------------------------
Total items: 560

Total items: 533
[CE12808]dis arp | include xxxx-xxxx-40fc       
ARP Entry Types: D - Dynamic, S - Static, I - Interface
EXP: Expire-time

IP ADDRESS      MAC ADDRESS    EXP(M) TYPE/VLAN INTERFACE       VPN-INSTANCE
------------------------------------------------------------------------------
10.111.65.22    xxxx-xxxx-40fc   18   D/101     GE1/7/0/14      
------------------------------------------------------------------------------
Total:398         Dynamic:328       Static:0    Interface:70

发现arp 并没有变化,还是从GE1/7/0/14 学习到的,mac刷新arp 没有生效。

 

通过查看配置了如下命令:

arp anti-attack entry-check fixed-all enable
即只有当ARP报文对应的MAC地址、接口、VLAN信息和ARP表项中的信息完全匹配时,设备才可以更新ARP表项的其他内容。

 

并且手册中有说明:

使用arp anti-attack entry-check { fixed-mac | fixed-all | send-ack } enable命令配置ARP表项固化功能后,MAC刷新ARP功能不生效。

 

根因

 

使用arp anti-attack entry-check { fixed-mac | fixed-all | send-ack } enable命令配置ARP表项固化功能后,MAC刷新ARP功能不生效。

解决方案

undo arp anti-attack entry-check enable  后测试正常

END