No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CX11x, CX31x, CX710 (Earlier Than V6.03), and CX91x Series Switch Modules V100R001C10 Configuration Guide 12

The documents describe the configuration of various services supported by the CX11x&CX31x&CX91x series switch modules The description covers configuration examples and function configurations.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuration Task Summary

Configuration Task Summary

ARP can be a dynamic ARP or a static ARP. ARP provides some extended functions, such as proxy ARP, ARP-Ping, Layer 2 proxy ARP, fast ARP reply, Egress ARP Inspection (EAI), Gratuitous ARP and so on.

Table 6-5 describes the ARP configuration tasks.
Table 6-5 ARP configuration task summary

Scenario

Description

Task

Configuring Static ARP

Static ARP entries improve communication security. However, a large number of ARP entries increase configuration and maintenance costs.

Static ARP entries can be configured on important network devices such as servers to specify member devices that they can communicate with. In this way, mappings between IP addresses and MAC addresses of these member devices cannot be modified by forged ARP packets and illegal ARP replies can be prevented. This protects servers against network attacks.

Configuring Static ARP

Optimizing Dynamic ARP

Dynamic ARP entries are generated and maintained automatically using the ARP protocol.

  • They can be aged, updated, or overridden by static ARP entries.

  • By default, ARP entries are dynamically learned and maintained.

Optimizing Dynamic ARP

Configuring Proxy ARP

Proxy ARP is classified into the following three types:
  • Routed Proxy ARP: Routed Proxy ARP enables network devices on the same network segment but on different physical networks to communicate.
  • Intra-VLAN Proxy ARP: Intra-VLAN Proxy ARP enables isolated network devices in a VLAN to communicate.
  • Inter-VLAN Proxy ARP: Inter-VLAN Proxy ARP enables network devices in different VLANs or network devices in different sub-VLANs but on the same network segment to communicate.
Configuring Proxy ARP

Configuring the Fast ARP Reply Function

If a device that functions as a gateway receives a large number of ARP Request packets, the device will be overloaded. As a result, the device fails to respond to ARP requests quickly. The fast ARP reply function enables the device to fast respond to ARP requests.

Configuring the Fast ARP Reply Function

Configuring Layer 2 Proxy ARP

Layer 2 ARP proxy reduces the burden of processing ARP packets for the device. It isolates the ARP broadcast domains and preferentially responds to ARP Request packets that match local entries.

Configuring Layer 2 Proxy ARP

Configuring Egress ARP Inspection

Egress ARP inspection enables the switch to restrict the scope of ARP packet forwarding. This function prevents broadcast of ARP packets in a VLAN and reduces the traffic volume in the VLAN.

Configuring Egress ARP Inspection

Configuring ARP-Ping

  • The ARP-Ping IP function checks whether an IP address is used by another device on the network.

  • The ARP-Ping MAC function checks whether a MAC address is used or queries the IP address mapping the MAC address.

Configuring ARP-Ping
NOTE:
  • Gratuitous ARP is enabled on the switch by default and does not need to be configured.
  • For ARP Security, see ARP Security Configuration in the CX11x&CX31x&CX91x Seriesswitch modules-Configuration Guide - Security.
Translation
Download
Updated: 2019-08-09

Document ID: EDOC1000041694

Views: 58614

Downloads: 3621

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next