No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

AR500, AR510, and AR530 V200R007 Commands Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
ARP Configuration Commands

ARP Configuration Commands

arp detect-mode unicast

Function

The arp detect-mode unicast command configures an interface to send ARP aging probe packets in unicast mode.

The undo arp detect-mode unicast command restores the default configuration of detection modes on an interface.

By default, an interface sends the last ARP aging probe packet in broadcast mode, and the rest ARP aging probe packets are sent in unicast mode.

Format

arp detect-mode unicast

undo arp detect-mode unicast

Parameters

None

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Before an ARP entry is aged, the interface periodically sends ARP aging probe packets at a set interval to update ARP entries. The device deletes an ARP entry if it does not receive a reply after a specified number of probes. The aging probe packet can be a unicast or broadcast packet.

When a non-Huawei device connected to a Huawei industrial switch router receives an ARP aging probe packet whose destination MAC address is a broadcast address, the non-Huawei device checks the ARP table. If the mapping between the IP address and the MAC address of the Huawei industrial switch router exists in the ARP table, the non-Huawei device discards the ARP aging probe packet. Then the Huawei industrial switch router cannot receive a response and deletes the corresponding ARP entry. As a result, traffic from the non-Huawei device cannot be forwarded. Therefore, when a non-Huawei device is connected to a Huawei industrial switch router, configure the Huawei switch to send ARP aging probe packets in unicast mode. The non-Huawei device needs to respond to the ARP aging probe packet.

Precautions

If the IP address of the peer device remains the same but the MAC address changes frequently, it is recommended that you configure ARP aging probe packets to be broadcast.

When the MAC address of the peer device remains the same, and the bandwidth of the network is insufficient, it is recommended that you set the interface to send ARP aging probe packets in unicast mode.

Example

# Configure an interface to send ARP aging probe packets in unicast mode.

<Huawei> system-view
[Huawei] interface ethernet 0/0/1
[Huawei-Ethernet0/0/1] arp detect-mode unicast

arp detect-times

Function

The arp detect-times command sets the number of ARP probes for aging dynamic ARP entries.

The undo arp detect-times command restores the default number of ARP probes for aging dynamic ARP entries.

By default, the number of ARP probes for aging dynamic ARP entries is 3.

Format

arp detect-times detect-times

undo arp detect-times

Parameters

Parameter Description Value
detect-times Specifies the number of ARP probes for aging dynamic ARP entries. The value is an integer ranging from 0 to 10. The default value is 3.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The arp detect-times command sets the number of ARP probes for aging dynamic ARP entries to reduce address resolution errors. Before aging a dynamic ARP entry, the system first performs probes. If no response is received after the number of probes reaches the upper limit, the ARP entry is deleted.

Precautions

If the number of ARP probes is set to 0, the system directly deletes expired ARP entries.

Example

# Set the number of ARP probes to 5 on Ethernet0/0/1.

<Huawei> system-view
[Huawei] interface ethernet 0/0/1
[Huawei-Ethernet0/0/1] arp detect-times 5

arp expire-time

Function

The arp expire-time command sets the aging time of dynamic ARP entries.

The undo arp expire-time command restores the default aging time of dynamic ARP entries.

By default, the aging time of dynamic ARP entries is 1200 seconds, that is, 20 minutes.

Format

arp expire-time expire-time

undo arp expire-time

Parameters

Parameter Description Value
expire-time Specifies the aging time of dynamic ARP entries. The value is an integer ranging from 60 to 62640, in seconds. The default value is 1200 seconds, that is, 20 minutes.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The arp expire-time command sets the aging time of dynamic ARP entries to reduce address resolution errors.

Precautions

After proxy ARP is enabled, the aging time of ARP entries on hosts should be shortened so that invalid ARP entries can be deleted as soon as possible. Then IP packet forwarding failures decrease on the router.

The command can be configured globally or on the specified interface. If the command is not configured on the interface, the aging expiry time of a dynamic ARP entry will be the one configured globally. If the command is both configured globally and on the specified interface, the aging expiry time of a dynamic ARP entry will be the one configured on the interface.

Example

# Set the aging time of dynamic ARP entries to 600s on Ethernet0/0/1.

<Huawei> system-view
[Huawei] interface ethernet 0/0/1
[Huawei-Ethernet0/0/1] arp expire-time 600

arp learning multicast enable (system view)

Function

The arp learning multicast enable command globally enables a device to learn multicast MAC addresses and generate dynamic ARP entries.

The undo arp learning multicast enable command globally disables a device from learning multicast MAC addresses and generate dynamic ARP entries.

By default, a device is globally disabled from learning multicast MAC addresses.

Format

arp learning multicast enable

undo arp learning multicast enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

A MAC address corresponding to an IP address may be a multicast MAC address. In this case, a network administrator has to configure a static ARP entry. A device can generate dynamic ARP entries if enabled to learn multicast MAC addresses. This way reduces a network administrator's workload of configuring static ARP entries and reduces network operation and maintenance costs.

Precautions

After a device is enabled to learn multicast MAC addresses, the device may be attacked by ARP attack packets carrying multicast MAC addresses as source MAC addresses.

Example

# Globally enable a device to learn multicast MAC addresses and generate dynamic ARP entries.

<Huawei> system-view
[Huawei] arp learning multicast enable

arp-ping ip

Function

The arp-ping ip command checks whether an IP address on a LAN is in use by sending ARP packets.

Format

arp-ping ip ip-address [ timeout time-out-value ] [ interface interface-type interface-number [ vlan-id vlan-id ] ]

Parameters

Parameter Description Value
ip-address Specifies the destination IP address. The value is in dotted decimal notation.
interface interface-type interface-number Specifies the type and number of the interface that sends ARP packets. Where,
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

You must configure an outbound interface through which ARP packets are sent if you monitor the local IP address.

By default, you can search the FIB table for an outbound interface through which ARP packets are sent if you monitor a non-local IP address.

timeout time-out-value Specifies the timeout period for an ARP-ping test. You are advised to specify the parameter if you monitor the local IP address. The value is an integer in the range 1 to 10, in seconds. The default value is 3s.
vlan-id vlan-id Specifies the ID of a VLAN. The ID is an integer ranging from 1 to 4094. If this parameter is not specified, the VLAN ID is considered as 0. When the specified outbound interface is a Layer 2 interface, you need to configure vlan-id; when the specified outbound interface is a Layer 3 interface, you cannot configure vlan-id.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

The arp-ping ip command checks whether an IP address on a LAN is in use by sending ARP packets.

The ping command can also check whether an IP address is in use. If the destination host or the industrial switch router configured with the firewall function are configured not to reply to ping packets, there is no response to the ping packet. Consequently, the IP address is considered unused. ARP is a Layer 2 protocol; therefore, ARP packets can pass through the firewall that is configured not to reply to ping packets. In this way, the preceding situation does not occur.

In addition, the length of an ARP Request packet is smaller than that of an Internet Control Message Protocol (ICMP) packet used in the ping command, occupying fewer network resources. You are advised to use the arp-ping ip command.

Precautions

ARP has been enabled and the device can send and receive ARP packets.

If the IP address specified in the arp-ping ip command is the IP address of the local device or a loopback address, the detection fails.

Example

# Run the arp-ping ip command to check whether the IP address 10.1.1.1 is used.

<Huawei> arp-ping ip 10.1.1.1
ARP-Pinging 10.1.1.1:

10.1.1.1 is used by 00e0-fc91-8d70
Related Topics

arp-ping mac

Function

The arp-ping mac command checks whether a MAC address is used by another device on a LAN by sending ICMP packets or checks the IP address corresponding to the MAC address.

Format

arp-ping mac mac-address { ip-address [ vpn-instance vpn-instance-name ] | interface interface-type interface-number }

Parameters

Parameter Description Value
mac-address Specifies the destination MAC address. The value is in the H-H-H format. Each H contains one to four hexadecimal numbers, such as 00e0 and fc01. If you enter fewer than four digits, 0s are padded before the input digits. For example, if e0 is entered, 00e0 is displayed. The MAC address cannot be a multicast, broadcast, or virtual MAC address.
ip-address Specifies the network segment to be queried. The value is in dotted decimal notation.
vpn-instance vpn-instance-name Specifies the name of a VPN instance. The value must be an existing VPN instance.
interface interface-type interface-number Specifies the type and number of the interface that sends and receives ICMP packets. Where,
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

When you know a specific MAC address but not the corresponding IP address on a network segment, you can run the arp-ping mac command to send ICMP packets.

ICMP has been enabled and the device can send and receive ICMP packets.

Example

# Run the arp-ping mac command on VLANIF2 to check whether the MAC address 00e0-fca6-a45d is used on a LAN.

<Huawei> arp-ping mac 00e0-fca6-a45d interface vlanif 2
  OutInterface: VLANIF2 MAC[00-E0-FC-A6-A4-5D], press CTRL_C to break

    ----- ARP-Ping MAC statistics -----
    1 packet(s) transmitted
    1 packet(s) received

    IP ADDRESS                MAC ADDRESS
    192.168.1.122             00-E0-FC-A6-A4-5D
Table 7-5  Description of the arp-ping mac command output
Item Description
IP ADDRESS IP address mapping the specified MAC address.
MAC ADDRESS MAC address to be checked.
Related Topics

arp-proxy enable

Function

The arp-proxy enable command enables routed proxy ARP on an interface.

The undo arp-proxy enable command disables routed proxy ARP on an interface.

By default, routed proxy ARP is disabled on an interface.

Format

arp-proxy enable

undo arp-proxy enable

Parameters

None

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If two hosts on different physical networks of the same logical network segment are not configured with the default gateways, you can use the arp-proxy enable command to enable routed proxy ARP on a device between the two hosts to resolve IP addresses of the hosts.

Precautions

Routed ARP proxy allows hosts on different physical networks of the same logical network segment to communicate. The IP addresses of the hosts on a subnet have the same network ID; therefore, the default gateway address does not need to be configured on the hosts.

Example

# Enable routed proxy ARP on Ethernet0/0/1.

<Huawei> system-view
[Huawei] interface ethernet 0/0/1
[Huawei-Ethernet0/0/1] arp-proxy enable

arp-proxy inner-sub-vlan-proxy enable

Function

The arp-proxy inner-sub-vlan-proxy enable command enables intra-VLAN proxy ARP.

The undo arp-proxy inner-sub-vlan-proxy enable command disables intra-VLAN proxy ARP.

By default, intra-VLAN proxy ARP is disabled.

Format

arp-proxy inner-sub-vlan-proxy enable

undo arp-proxy inner-sub-vlan-proxy enable

Parameters

None

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

If host isolation is configured on the industrial switch router, you need to configure intra-VLAN proxy ARP to allow hosts to communicate in a VLAN.

Example

# Enable intra-VLAN proxy ARP on VLANIF 10.

<Huawei> system-view
[Huawei] interface vlanif 10
[Huawei-Vlanif10] arp-proxy inner-sub-vlan-proxy enable

arp-proxy inter-sub-vlan-proxy enable

Function

The arp-proxy inter-sub-vlan-proxy enable command enables inter-VLAN proxy ARP or proxy ARP on termination sub-interfaces.

The undo arp-proxy inter-sub-vlan-proxy enable command disables inter-VLAN proxy ARP or proxy ARP on termination sub-interfaces.

By default, inter-VLAN proxy ARP or proxy ARP on termination sub-interfaces is disabled.

Format

arp-proxy inter-sub-vlan-proxy enable

undo arp-proxy inter-sub-vlan-proxy enable

Parameters

None

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

To implement communication between different VLANs, you must enable inter-VLAN proxy ARP on the interface.

In a super-VLAN, hosts of different sub-VLANs cannot communicate. To implement communication between them, you must enable inter-VLAN proxy ARP on the VLANIF interface of the super-VLAN.

Example

# Enable inter-VLAN proxy ARP on VLANIF 10.

<Huawei> system-view
[Huawei] interface vlanif 10
[Huawei-Vlanif10] arp-proxy inter-sub-vlan-proxy enable

arp purge slowly

Function

The arp purge slowly command configures the deletion delay function of dynamical ARP entries.

The undo arp purge slowly command deletes the deletion delay function of dynamical ARP entries.

By default, the deletion delay function of dynamical ARP entries is not configured on the device.

Format

arp purge slowly

undo arp purge slowly

Parameters

None

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

Normally, if an interface in a VLAN goes Down, a device immediately deletes the dynamic ARP entries learned by the interface. The VLANIF interface must relearn ARP entries to forward user traffic. However, in some special networking scenarios, such as the ring or dual-homing networking, a interface in a VLAN going down does not necessarily mean that its interconnected interface is deleted. The outbound interface of ARP entries may change. In this situation, it will take a long time for the device to relearn ARP entries, interrupting user traffic.

To minimize the preceding impact and accelerate user traffic convergence, run the arp purge slowly command to enable the device to delete dynamic ARP entries after a delay after the interface in a VLAN goes Down.

After the arp purge slowly command is configured on an interface, the device does not immediately delete dynamic ARP entries learned by the interface after it goes Down. Instead, it sends ARP detection packets and then deletes or updates ARP entries depending on whether it receives ARP reply packets within the ARP aging time:
  • If the device does not receive ARP reply packets, it deletes the dynamic ARP entries.
  • If the device receives ARP reply packets, it updates ARP entries based on information contained in the ARP reply packets.

Example

# Enable a device to delete dynamic ARP entries after a delay if an interface in VLANIF10 goes Down.

<Huawei> system-view
[Huawei] interface vlanif 10
[Huawei-Vlanif10] arp purge slowly

arp regularly-refresh enable

Function

The arp regularly-refresh enable command enables the scheduled ARP refresh function.

The undo arp regularly-refresh enable command disables the scheduled ARP refresh function.

By default, the scheduled ARP refresh function is enabled.

Format

arp regularly-refresh enable

undo arp regularly-refresh enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, the scheduled ARP refresh function is enabled on the device, and the device updates ARP entries every 10 hours. And clears the fast forwarding table every ten hoursWhen fast forwarding is enabled (using the ip fast-forwarding enable command) on interfaces of the device, the fast forwarding table is cleared periodically, which results in traffic jitter. You can run the undo arp regularly-refresh enable command to disable the scheduled ARP refresh function to prevent traffic jitter.

Example

# Disable the scheduled ARP refresh function.

<Huawei> system-view
[Huawei] undo arp regularly-refresh enable

arp send-packet

Function

The arp send-packet command configures the ARP unicast detection function.

Format

arp send-packet ip-address mac-address interface interface-type interface-number [ vid vid [ cevid cevid ] ]

Parameters

Parameter Description Value
ip-address Specifies a destination IP address for a unicast ARP request packet to be sent. This value is in dotted decimal notation.
mac-address Specifies a destination MAC address for a unicast ARP request packet to be sent. The value is in H-H-H format. H is a hexadecimal number of 1 to 4 digits. mac-address cannot be FFFF-FFFF-FFFF.
interface interface-type interface-number Specifies the type and number of an interface for sending out a unicast ARP request packet. -
vid vid Specifies an outer tag value for a unicast ARP request packet to be sent. The value is an integer ranging from 1 to 4094.
cevid cevid Specifies an inner tag value for a unicast ARP request packet to be sent. The value is an integer ranging from 1 to 4094.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

To check whether a peer device is reachable, run the arp send-packet command to configure a local interface to send a unicast ARP request packet that carries the peer device's IP and MAC addresses as the destination addresses.
  • If the peer is reachable, the peer sends an ARP reply packet to the local device. Then, the local device uses information carried in the ARP reply packet to create or update an ARP entry for the peer.
  • If the peer is unreachable, the peer device does not send an ARP reply packet. The local device does not generate an ARP entry.

The ARP entries learned or updated by the local device will be deleted after their aging time expires and can be updated again after the local device receives ARP request packets from the peer device.

Example

# Configure GE1/0/0 to send a unicast ARP request packet that carries the destination IP address 2.2.2.3 and destination MAC address 5489-98f4-786e.

<Huawei> arp send-packet 2.2.2.3 5489-98f4-786e interface gigabitethernet 1/0/0 

arp static

Function

The arp static command configures static ARP entries.

The undo arp static command deletes static ARP entries.

By default, the ARP mapping table is empty and address mappings are obtained using dynamic ARP.

Format

arp static ip-address mac-address [ vpn-instance vpn-instance-name ]

arp static ip-address mac-address vid vlan-id [ cevid ce-vid ] interface interface-type interface-number

undo arp static ip-address [ mac-address ] [ vpn-instance vpn-instance-name | vid vlan-id [ cevid ce-vid ] interface interface-type interface-number ]

Parameters

Parameter Description Value
ip-address Specifies the IP address in a static ARP entry. The value is in dotted decimal notation.
mac-address Specifies the MAC address of a static ARP entry. The value is in H-H-H format. An H contains one to four hexadecimal numbers.
vpn-instance vpn-instance-name Specifies the name of a VPN instance. The parameter is used for the MPLS VPN feature. When this parameter is set, it indicates that the ARP entry is of the VPN instance.
NOTE:

After the name of a VPN instance is specifed, the device can automatically learn the outbound interface, with no need for specifying it.

The value must be an existing VPN instance.
interface interface-type interface-number Specifies the outbound interface of a static ARP packet.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.
NOTE:

If the IP address corresponding to the specified ARP entry belongs to the VPN, an outbound interface cannot be specified.

-
vid vlan-id Specifies the ID of the VLAN to which a static ARP entry belongs. The value is an integer ranging from 1 to 4094.
cevid ce-vid Specifies the inner VLAN ID. The value is a decimal integer ranging from 1 to 4094.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To ensure security and facilitate management, you may need to configure mappings between IP addresses and MAC addresses. In this case, run the arp static command to configure a fixed ARP mapping entry that maps an IP address to a MAC address.

A static ARP entry cannot be dynamically modified.

A static ARP entry is used in the following situations:
  • Direct the packets whose destination IP addresses are not on the local network segment to a gateway on the local network segment so that the packets can be forwarded by the gateway.

  • Bind the destination IP addresses of invalid packets to a nonexistent MAC address so that the invalid packets are filtered out.

Precautions

If a static ARP entry to be created exists, the system updates the entry.

After a static ARP entry is configured, it cannot be dynamically updated.

The IP address specified by ip-address and the IP address of the outbound interface specified by interface must be on the same network segment.

  • For Layer 3 physical interfaces and Layer 3 Eth-Trunk interfaces, run the arp static ip-address mac-address command to configure static ARPentries.
  • For VLANIF interfaces and Dot1q termination sub-interfaces, run the arp static ip-address mac-address vid vlan-id interface interface-type interface-number command to configure static ARP entries.
  • For QinQ termination sub-interfaces, run the arp static ip-address mac-address vid vlan-id cevid ce-vid interface interface-type interface-number command to configure static ARP mapping entries with double tags. vid specified in this command must be the same as pe-vid in the qinq termination pe-vid ce-vid command, and ce-vid must be within the value range of ce-vid in the qinq termination pe-vid ce-vid command.
  • For interfaces bound to a VPN instance:
    • For Layer 3 physical interfaces and Layer 3 Eth-Trunk interfaces, run the arp static ip-address mac-address vpn-instance vpn-instance-name command to configure static ARP entries.
    • For VLANIF interfaces and Dot1q termination sub-interfaces, run the arp static ip-address mac-address vid vlan-id interface interface-type interface-number command to configure static ARP entries.
    • For QinQ termination sub-interfaces, run the arp static ip-address mac-address vid vlan-id cevid ce-vid interface interface-type interface-number command to configure static ARP mapping entries with double tags. vid specified in this command must be the same as pe-vid in the qinq termination pe-vid ce-vid command, and ce-vid must be within the value range of ce-vid in the qinq termination pe-vid ce-vid command.

Example

# Configure a static ARP entry that maps the IP address 10.0.0.1 to the MAC address aaaa-fccc-1212.

<Huawei> system-view
[Huawei] arp static 10.0.0.1 aaaa-fccc-1212

# Configure a static ARP entry that maps the IP address 10.1.1.1 to MAC address 0efc-0505-86e3. This entry belongs to VLAN 10. The outbound interface is Ethernet0/0/1.

<Huawei> system-view
[Huawei] arp static 10.1.1.1 0efc-0505-86e3 vid 10 interface ethernet 0/0/1

# Configure a static ARP entry that maps the IP address 10.1.1.1 to MAC address 0efc-0505-86e3. This ARP entry belongs to the VPN instance vpn1.

<Huawei> system-view
[Huawei] ip vpn-instance vpn1
[Huawei-vpn-instance-vpn1] ipv4-family
[Huawei-vpn-instance-vpn1-af-ipv4] quit
[Huawei-vpn-instance-vpn1] quit
[Huawei] arp static 10.1.1.1 0efc-0505-86e3 vpn-instance vpn1
# Configure an ARP entry that maps the IP address 10.1.1.1 to the MAC address 00e0-fc01-0000. The VLAN ID in the outer VLAN tag is 10 and the VLAN ID in the inner VLAN tag is 100. The outbound interface is GE1/0/0.1.
<Huawei> system-view
[Huawei] arp static 10.1.1.1 00e0-fc01-0000 vid 10 cevid 100 interface gigabitethernet 1/0/0.1

arp-suppress enable

Function

Using the arp-suppress enable command, you can enable ARP suppression.

Using the undo arp-suppress command, you can disable ARP suppression.

By default, ARP suppression is disabled but is enabled on VLANIF interfaces.

Format

arp-suppress enable

undo arp-suppress

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

If the system receives a great number of ARP packets from the same source at a time, it needs to update ARP entries repeatedly, causing performance deterioration. To ensure system performance, you can enable ARP suppression. The system then only responds to ARP Request packets but does not update ARP entries.

If ARP suppression is enabled for all interfaces, ARP entries on some interfaces cannot be updated temporarily. ARP suppression is applicable to only VLANIF and Eth-Trunk interfaces. By default, it always takes effect on VLANIF interfaces. It can be configured on other logical interfaces.

After the undo arp-suppress command is executed, ARP suppression is enabled only on VLANIF interfaces.

Example

# Enable ARP suppression.

<Huawei> system-view
[Huawei] arp-suppress enable

display arp

Function

The display arp command displays all ARP mapping entries.

Format

display arp [ all | brief ]

Parameters

Parameter

Description

Value

all

Displays all ARP mapping entries.

-

brief

Displays brief information about ARP mapping entries.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

This command displays all ARP mapping entries, including the aging time of ARP entries, ARP entry type, and VPN instance to which ARP entries belong.

Example

# Display all ARP mapping entries.
<Huawei> display arp all
IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE
                                          VLAN/CEVLAN PVC
------------------------------------------------------------------------------
192.168.0.1     00e0-fc01-0000            S--
192.168.118.1   0018-2000-0083            I -         Vlanif11   
10.1.1.1        0018-2000-0083            I -         Vlanif10
10.1.1.116      0018-2000-0083            I -         GE2/0/0
10.1.1.118      0001-0c01-3401  14        D-0         GE2/0/0
10.1.1.4        0016-ecb7-a879  18        D-0         GE2/0/0
------------------------------------------------------------------------------
Total:6        Dynamic:2      Static:1    Interface:3
# Display brief information about all ARP mapping entries.
<Huawei> display arp brief
IP ADDRESS      MAC ADDRESS    EXPIRE(M) TYPE  INTERFACE           VLAN/CEVLAN  
------------------------------------------------------------------------------  
192.168.200.176 5489-9876-2c5c           I -   Eth1/0/0                          
192.168.200.100 5489-98f4-5a8e 18        D-0   Eth1/0/1                          
10.1.1.2        5489-9876-2c5e           I -   Eth1/0/2                          
------------------------------------------------------------------------------  
Total:3         Dynamic:1       Static:0     Interface:2                        
Table 7-6  Description of the display arp command output

Item

Description

IP ADDRESS

IP address in the ARP entry.

MAC ADDRESS

MAC address in the ARP entry.

If the field is Incomplete, the entry is a fake ARP entry. If a large number of ARP Miss messages are sent to the upper-layer software, the system resources will be exhausted in processing the ARP Miss messages. To resolve this problem, the system automatically generates ARP fake entries instead of ARP entries.

You can run the arp-fake expire-time command to configure the aging time of fake ARP entries.

EXPIRE(M)

Remaining lifetime of ARP entries, in minutes.

TYPE

ARP entry type and slot ID of the LPU that obtains the entry. The entry type contains 3 bits. The first bit can be any of the following:
  • I: Interface, indicating the MAC address of the interface

  • D: Dynamic, indicating the dynamic entry obtained through the ARP packet

  • S: Static, indicating the static entry obtained through static configuration

If the second bit is F, the ARP entry has been reported to the routing module, the route to this IP address has been calculated, and the entry in the FIB has been updated.
NOTE:

If the entry is not reported to the routing module, this field displays "-". For the ARP entry with the type as "I", this flag bit does not exist.

The third bit indicates the slot ID of the LPU that obtains the entry.
NOTE:

For the ARP entry with the type as "I" or "S", this field displays "-".

VPN-INSTANCE

Name of the VPN instance to which the ARP entry belongs.

The value is set using the ip vpn-instance command.

INTERFACE

Type and number of the interface that has learnt ARP entries.

VLAN/CEVLAN

ID of the VLAN to which the ARP entry belongs. The value is set using the vlan command.

PVC

Interface where the PVC exists and the corresponding VPI/VCI.

Total

Total number of ARP entries in the ARP mapping table.

Dynamic

Number of dynamic ARP entries in the ARP mapping table.

Static

Number of static ARP entries in the ARP mapping table.

Interface

Number of ARP entries in the ARP mapping table on the local interface.

display arp error packet

Function

The display arp error packet command displays the latest ten ARP error packets.

Format

display arp error packet

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

If a device cannot learn ARP entries, you can run this command to check the latest received ARP error packets. The ARP error packets help locate the fault.

Example

# Display the latest ten ARP error packets.

<Huawei> display arp error packet 
--------------------------------------------------                              
 [interface = Vlanif10, time = 2010-05-24 20:34:53]:                            
 00 01 08 00 06 04 00 01 00 25 9E 4B 1F 75 0A 8A                                
 4E 02 00 00 00 00 00 00 0A 8A 4E FF 00 00 00 00                                
 00 00 00 00 00 00 FF FF FF FF FF FF 00 25                                      
--------------------------------------------------                              
 [interface = Vlanif10, time = 2010-05-24 20:34:54]:                            
 00 01 08 00 06 04 00 01 00 13 72 FD E7 1C 0A 8A                                
 4E 98 00 00 00 00 00 00 0A 8A 4E 30 00 00 00 00                                
 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00                                
 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00                                
--------------------------------------------------                              
 [interface = Vlanif10, time = 2010-05-24 20:34:55]:                            
 00 01 08 00 06 04 00 01 00 13 72 9B 21 A7 0A 8A                                
 4E 82 00 00 00 00 00 00 0A 8A 4E 01 00 00 00 00                                
 00 00 00 00 00 00 00 00 00 00 00 00 00 00                                      
--------------------------------------------------                              
 [interface = Vlanif10, time = 2010-05-24 20:35:05]:                            
 00 01 08 00 06 04 00 01 00 13 72 9B 21 A7 0A 8A                                
 4E 82 00 00 00 00 00 00 0A 8A 4E 01 00 00 00 00                                
 00 00 00 00 00 00 00 00 00 00 00 00 00 00                                      
--------------------------------------------------                              
 [interface = Vlanif10, time = 2010-05-24 20:35:05]:                            
 00 01 08 00 06 04 00 01 00 E0 FC 8F B2 DD 0A 8A                                
 4E 01 00 00 00 00 00 00 0A 8A 4F FA 00 00 00 00                                
 00 00 00 00 00 00 00 00 00 00 00 00 00 00                                      
--------------------------------------------------                              
 [interface = Vlanif10, time = 2010-05-24 20:35:08]:                            
 00 01 08 00 06 04 00 01 00 0F E2 5C 8C EA AC 12                                
 3E FE 00 00 00 00 00 00 AC 12 3E FE 00 00 00 00                                
 00 00 00 00 00 00 00 00 00 00 00 00 00 00                                      
--------------------------------------------------                              
 [interface = Vlanif10, time = 2010-05-24 20:35:11]:                            
 00 01 08 00 06 04 00 01 00 1B B9 78 25 2E 0A 8A                                
 4E A5 00 00 00 00 00 00 0A 8A 4E 2D 00 00 00 00                                
 00 00 00 00 00 00 00 00 00 00 00 00 00 00                                      
--------------------------------------------------                              
 [interface = Vlanif10, time = 2010-05-24 20:35:15]:                            
 00 01 08 00 06 04 00 01 00 13 72 9B 21 A7 0A 8A                                
 4E 82 00 00 00 00 00 00 0A 8A 4E 01 00 00 00 00                                
 00 00 00 00 00 00 00 00 00 00 00 00 00 00                                      
--------------------------------------------------                              
 [interface = Vlanif10, time = 2010-05-24 20:35:19]:                            
 00 01 08 00 06 04 00 01 00 13 72 9B 21 A7 0A 8A                                
 4E 82 00 00 00 00 00 00 0A 8A 4E 01 00 00 00 00                                
 00 00 00 00 00 00 00 00 00 00 00 00 00 00                                      
--------------------------------------------------                              
 [interface = Vlanif10, time = 2010-05-24 20:35:22]:                            
 00 01 08 00 06 04 00 01 00 E0 FC 8F B2 DD 0A 8A                                
 4E 01 00 00 00 00 00 00 0A 8A 4F FA 00 00 00 00                                
 00 00 00 00 00 00 00 00 00 00 00 00 00 00        
Table 7-7  Description of the display arp error packet command output

Item

Description

interface

Interface name.

time

Time when an ARP error packet is received.

display arp interface

Function

The display arp interface command displays ARP mapping entries of a specified interface.

Format

display arp interface interface-type interface-number [ vid vlan-id [ cevid cevlan-id ] ]

Parameters

Parameter

Description

Value

interface-type interface-number

Specifies the type and number of an interface.

-

vid vlan-id

Specifies a VLAN ID.

The value is an integer ranging from 1 to 4094.

cevid cevlan-id

Specifies the CE VLAN ID.

The value is an integer ranging from 1 to 4094.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

To monitor dynamic ARP entries or locate the faults in ARP, you can run this command to check the ARP entries.

Example

# Display all the ARP entries of Ethernet0/0/1.

<Huawei> display arp interface ethernet 0/0/1
IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE
                                          VLAN/CEVLAN PVC
------------------------------------------------------------------------------
192.168.1.11    0000-0a41-0201            I -         Ethernet1/0/1       r1
192.168.1.1     0000-0a41-0200  15        D-6         Ethernet1/0/1       r1
------------------------------------------------------------------------------
Total:2         Dynamic:1       Static:0    Interface:1    
Table 7-8  Description of the display arp interface command output

Item

Description

IP ADDRESS

IP address in the ARP entry.

MAC ADDRESS

MAC address in the ARP entry.

If the field is Incomplete, the entry is a fake ARP entry. If a large number of ARP Miss messages are sent to the upper-layer software, the system resources will be exhausted in processing the ARP Miss messages. To resolve this problem, the system automatically generates ARP fake entries instead of ARP entries.

You can run the arp-fake expire-time command to configure the aging time of fake ARP entries.

EXPIRE(M)

Remaining lifetime of the ARP entry, in minutes.

TYPE

ARP entry type and slot ID of the LPU that obtains the entry. The entry type contains 3 bits. The first bit can be any of the following:
  • I: Interface, indicating the MAC address of the interface

  • D: Dynamic, indicating the dynamic entry obtained through the ARP packet

  • S: Static, indicating the static entry obtained through static configuration

The second bit can only be F, indicating that the entry is reported to the routing module, the route to this IP address is calculated, and entries in the FIB are correspondingly updated.
NOTE:

If the entry is not reported to the routing module, this field displays "-". For the ARP entry with the type as "I", this flag bit does not exist.

The third bit indicates the slot ID of the LPU that obtains the entry.
NOTE:

For the ARP entry with the type as "I" or "S", this field displays "-".

INTERFACE

Type and number of the interface that has learnt ARP entries.

VPN-INSTANCE

Name of the VPN instance to which the ARP entry belongs.

The value is set using the ip vpn-instance command.

VLAN/CEVLAN

ID of the VLAN to which the ARP entry belongs.

The value is set using the vlan command.

PVC

Interface where the PVC exists and the corresponding VPI/VCI.

Total

Number of ARP entries.

Dynamic

Number of dynamic ARP entries.

Static

Number of static ARP entries.

Interface

Number of ARP entries of the local interface.

display arp ip-conflict track

Function

The display arp ip-conflict track command displays recorded information about the detected IP address conflict.

Format

display arp ip-conflict track

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

Route flapping caused by IP address conflicts affects user services. To help users quickly locate IP conflicts to better manage IP addresses of network devices, run the display arp ip-conflict track command to view the recorded information about the detected IP address conflict.

NOTE:
The maximum number of IP conflict information that can be recorded by the system is 200, and the oldest recorded information will be covered by newly added if the conflicted IP address is more than 200.

Example

# Display the information of the detected IP address conflict.

<Huawei> display arp ip-conflict track
    Conflict type       : Remote IP Confilct    
    IP address          : 100.1.1.1
    System time         : 2011-04-10 06:59:43
    Conflict count      : 1                        
    Suppress count      : 0
    Old interface       : GE1/0/1                 
    Receive interface   : GE1/0/2
    Old VLAN/CEVLAN     : 100/0                      
    Receive VLAN/CEVLAN : 100/0
    Old MAC             : 00e0-ca63-8141           
    Receive MAC         : 00e0-ca63-8142
Table 7-9  Description of the display arp ip-conflict track command output

Item

Description

Conflict type

IP address conflict type

IP address

Conflicting IP address

System time

System time when an IP conflict occurred

Conflict count

Total number of the IP conflict times

NOTE:
The field is displayed as 0 if the ARP entry corresponding to the IP address expires or is deleted.

Suppress count

Number of the suppressed IP conflicts

NOTE:
The field is displayed as 0 if the ARP entry corresponding to the IP address expires or is deleted.

Old interface

Interface recorded in the ARP entry of the IP address

Receive interface

Interface that receives the ARP packet with duplicate IP address

Old VLAN/CEVLAN

VLAN and CEVLAN recorded in the ARP entry of the IP address

Receive VLAN/CEVLAN

VLAN and CEVLAN configured on the interface that receives the ARP packet with duplicate IP address

Old MAC

Source MAC address recorded in the ARP entry of the IP address

Receive MAC

Source MAC address of the second ARP packet with duplicate IP address

display arp dynamic

Function

The display arp dynamic command displays all dynamic ARP entries.

Format

display arp dynamic

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

None

Example

# Display all dynamic ARP mapping entries.
<Huawei> display arp dynamic
IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE  
                                          VLAN/CEVLAN                       
------------------------------------------------------------------------------  
10.137.217.210  00e0-fc01-0203            I -         Ethernet1/0/0                 
10.137.216.1    0025-9e38-a09e  20        D-0         Ethernet1/0/0                   
10.137.217.208  00e0-fc01-0205  16        D-0         Ethernet1/0/0                   
10.2.2.1        00e0-fc99-9999            I -         Eth-Trunk0                
10.6.3.34       00e0-fc01-0204            I -         Ethernet2/0/0.1                 
192.168.20.1    00e0-fc99-9999            I -         Vlanif100                 
10.0.0.1        00e0-fc99-9999            I -         Vlanif200                 
------------------------------------------------------------------------------  
Total:7         Dynamic:2      Static:0    Interface:5                         
Table 7-10  Description of the display arp dynamic command output

Item

Description

IP ADDRESS

IP address in the ARP entry.

MAC ADDRESS

MAC address in the ARP entry.

If the field is Incomplete, the entry is a fake ARP entry. If a large number of ARP Miss messages are sent to the upper-layer software, the system resources will be exhausted in processing the ARP Miss messages. To resolve this problem, the system automatically generates ARP fake entries instead of ARP entries.

You can run the arp-fake expire-time command to configure the aging time of fake ARP entries.

EXPIRE(M)

Remaining lifetime of ARP entries, in minutes.

TYPE

ARP entry type and slot ID of the LPU that obtains the entry. The entry type contains 3 bits. The first bit can be any of the following:
  • I: Interface, indicating the MAC address of the interface

  • D: Dynamic, indicating the dynamic entry obtained through the ARP packet

  • S: Static, indicating the static entry obtained through static configuration

The second bit can only be F, indicating that the ARP entry has been reported to the routing module, the route to this IP address has been calculated, and the entry in the FIB has been updated.
NOTE:

If the entry is not reported to the routing module, this field displays "-". For the ARP entry with the type as "I", this flag bit does not exist.

The third bit indicates the slot ID of the LPU that obtains the entry.
NOTE:

For the ARP entry with the type as "I" or "S", this field displays "-".

VPN-INSTANCE

Name of the VPN instance to which the ARP entry belongs.

The value is set using the ip vpn-instance command.

INTERFACE

Type and number of the interface that has learnt ARP entries.

VLAN/CEVLAN

ID of the VLAN to which the ARP entry belongs. The value is set using the vlan command.

Total

Total number of ARP entries in the ARP mapping table.

Dynamic

Number of dynamic ARP entries in the ARP mapping table.

Static

Number of static ARP entries in the ARP mapping table.

Interface

Number of ARP entries in the ARP mapping table on the local interface.

display arp dynamic vlan

Function

The display arp dynamic vlan command displays dynamic ARP entries that a device has generated on a specified VLAN.

Format

display arp dynamic vlan vlan-id

Parameters

Parameter Description Value
vlan vlan-id

Displays the dynamic ARP entries that a device has generated on a specified VLAN.

If this parameter is not specified, all dynamic ARP entries that a device has generated are displayed.

The value is an integer ranging from 1 to 4094.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

To monitor dynamic ARP or locate a fault if dynamic ARP goes faulty on a device, run the display arp dynamic vlan command to view dynamic ARP entries. The display arp dynamic vlan command displays dynamic ARP entries that a device has generated. You can locate the fault based on the command output.

Example

# Display dynamic ARP entries that a device has generated on VLAN 10.

<Huawei> display arp dynamic vlan 10
IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE
                                          VLAN/CEVLAN                           
------------------------------------------------------------------------------  
102.1.1.1       0000-c10b-5f77            I -            Vlanif10                  
102.1.1.2       00e0-4c77-5e3c  20        D-0            GE1/0/1                
                                           10/-                                 
102.1.1.3       0025-9e36-e8a6  14        D-0            GE1/0/2                
                                           10/-                                 
102.1.1.4       00e0-fcd5-c860  19        D-0            GE1/0/3                
                                           10/-                                 
------------------------------------------------------------------------------  
Total:4         Dynamic:3       Static:0     Interface:1                        
Table 7-11  Description of the display arp dynamic vlan command output

Item

Description

IP ADDRESS

IP address in an ARP entry.

MAC ADDRESS

MAC address in an ARP entry.

EXPIRE(M)

Remaining lifetime of an ARP entry, in minutes.

TYPE

ARP entry type and slot ID. The first bit can be any of the following:
  • I: Interface (ARP entries on the interface)

  • D: Dynamic (Dynamic ARP entries)

  • S: Static (Static ARP entries)

The second bit can only be F, indicating that the entry is reported to the routing module, the route to this IP address is calculated, and the entries in the forward information base (FIB) are updated.
NOTE:

If the entry is not reported to the routing module, this field displays a hyphen (-). For the ARP entry of "I", this flag bit does not exist.

The third bit indicates the slot ID for the interface board from which the ARP entry is obtained.
NOTE:

For the ARP entry of "I" or "S", this field displays a hyphen (-).

VPN-INSTANCE

Name of the VPN instance to which the ARP entry belongs.

The value is set using the ip vpn-instance command.

INTERFACE

Type and number of the interface on which the ARP entry is generated.

VLAN/CEVLAN

ID of the VLAN to which the ARP entry belongs.

Total

Total number of ARP entries.

Dynamic

Number of dynamic ARP entries.

Static

Number of static ARP entries.

Interface

Number of ARP entries on the interface.

display arp network

Function

The display arp network command displays ARP mapping entries of a specified network segment.

Format

display arp network net-number [ net-mask ] [ dynamic | static ]

Parameters

Parameter

Description

Value

net-number

Specifies the network ID.

The value is in dotted decimal notation.

net-mask

Specifies the subnet mask.

The value is in dotted decimal notation or a decimal number ranging from 1 to 32.

dynamic

Displays dynamic ARP entries of a specified network segment.

-

static

Displays static ARP entries of a specified network segment.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

None

Example

# Display all ARP entries of the network segment with network ID 10.10.0.0 and subnet mask 255.255.0.0.

<Huawei> display arp network 10.10.0.0 255.255.0.0
IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE
                                          VLAN/CEVLAN PVC 
------------------------------------------------------------------------------
10.10.20.9      0018-2000-0083            I -         Vlanif10
10.10.10.6      0018-2000-0083            I -         Vlanif20
------------------------------------------------------------------------------
Total:2         Dynamic:0       Static:0     Interface:2               
Table 7-12  Description of the display arp network command output

Item

Description

IP ADDRESS

IP address in the ARP entry.

MAC ADDRESS

MAC address in the ARP entry.

If the field is Incomplete, the entry is a fake ARP entry. If a large number of ARP Miss messages are sent to the upper-layer software, the system resources will be exhausted in processing the ARP Miss messages. To resolve this problem, the system automatically generates ARP fake entries instead of ARP entries.

You can run the arp-fake expire-time command to configure the aging time of fake ARP entries.

EXPIRE(M)

Remaining lifetime of the ARP entry, in minutes.

TYPE

ARP entry type and slot ID of the LPU that obtains the entry. The entry type contains 3 bits. The first bit can be any of the following:
  • I: Interface, indicating the MAC address of the interface

  • D: Dynamic, indicating the dynamic entry obtained through the ARP packet

  • S: Static, indicating the static entry obtained through static configuration

The second bit can only be F, indicating that the ARP entry has been reported to the routing module, the route to this IP address has been calculated, and the entry in the FIB has been updated.
NOTE:

If the entry is not reported to the routing module, this field displays "-". For the ARP entry with the type as "I", this flag bit does not exist.

The third bit indicates the slot ID of the LPU that obtains the entry.
NOTE:

For the ARP entry with the type as "I" or "S", this field displays "-".

VPN-INSTANCE

Name of the VPN instance to which the ARP entry belongs.

The value is set using the ip vpn-instance command.

INTERFACE

Type and number of the interface that has learnt ARP entries.

VLAN/CEVLAN

ID of the VLAN to which the ARP entry belongs.

The value is set using the vlan command.

PVC

Interface where the PVC exists and the corresponding VPI/VCI.

Total

Total number of ARP entries in the ARP mapping table.

Dynamic

Number of dynamic ARP entries in the ARP mapping table.

Static

Number of static ARP entries in the ARP mapping table.

Interface

Number of ARP entries in the ARP mapping table on the local interface.

display arp packet statistics

Function

The display arp packet statistics command displays the statistics on ARP packets.

Format

display arp packet statistics

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

To locate and rectify ARP faults, you can run this command to the statistics on ARP packets.

Example

# Display the statistics on ARP packets.

<Huawei> display arp packet statistics
ARP Pkt Received:   sum  10088                                                  
ARP Learnt Count:   sum     52                                                  
ARP Pkt Discard For Limit:   sum      0                                         
ARP Pkt Discard For SpeedLimit:   sum     31                                    
ARP Pkt Discard For Proxy Suppress:   sum    307                                
ARP Pkt Discard For Other:   sum   9274             
Table 7-13  Description of the display arp packet statistics command output

Item

Description

ARP Pkt Received

Number of the received ARP packets.

ARP Learnt Count

Times of ARP learning.

ARP Pkt Discard For Limit

Number of ARP packets discarded due to the ARP entry limit.

ARP Pkt Discard For SpeedLimit

Number of ARP packets discarded when the number of ARP packets from a specified source IP address exceeds the limit.

ARP Pkt Discard For Proxy Suppress

Number of packets discarded for the speed limit.

ARP Pkt Discard For Other

Number of the packets discarded due to other causes.

display arp static

Function

The display arp static command displays all static ARP mapping entries.

Format

display arp static

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

None

Example

# Display all static ARP entries.
<Huawei> display arp static
IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE  
                                          VLAN/CEVLAN PVC                        
------------------------------------------------------------------------------
10.1.2.1        0023-0045-0067            S--
------------------------------------------------------------------------------
Total:1         Dynamic:0       Static:1     Interface:0
Table 7-14  Description of the display arp static command output

Item

Description

IP ADDRESS

IP address in the ARP entry.

MAC ADDRESS

MAC address in the ARP entry.

EXPIRE(M)

Remaining lifetime of ARP entries, in minutes.

TYPE

ARP entry type and slot ID of the LPU that obtains the entry. The entry type contains 3 bits. The first bit can be any of the following:
  • I: Interface, indicating the MAC address of the interface

  • D: Dynamic, indicating the dynamic entry obtained through the ARP packet

  • S: Static, indicating the static entry obtained through static configuration

The second bit can only be F, indicating that the ARP entry has been reported to the routing module, the route to this IP address has been calculated, and the entry in the FIB has been updated.
NOTE:

If the entry is not reported to the routing module, this field displays "-". For the ARP entry with the type as "I", this flag bit does not exist.

The third bit indicates the slot ID of the LPU that obtains the entry.
NOTE:

For the ARP entry with the type as "I" or "S", this field displays "-".

VPN-INSTANCE

Name of the VPN instance to which the ARP entry belongs.

The value is set using the ip vpn-instance command.

INTERFACE

Type and number of the interface that has learnt ARP entries.

VLAN/CEVLAN

ID of the VLAN to which the ARP entry belongs.

The value is set using the vlan command.

PVC

Interface where the PVC exists and the corresponding VPI/VCI.

Total

Total number of ARP entries in the ARP mapping table.

Dynamic

Number of dynamic ARP entries in the ARP mapping table.

Static

Number of static ARP entries in the ARP mapping table.

Interface

Number of ARP entries in the ARP mapping table on the local interface.

display arp statistics

Function

The display arp statistics command displays ARP entry statistics.

Format

display arp statistics { all | interface interface-type interface-number }

Parameters

Parameter Description Value
all Displays ARP entry statistics of the system. -
interface interface-type interface-number Displays ARP entry statistics of a specified interface. -

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

To monitor ARP entries or locate the faults in ARP, you can run this command to check ARP entry statistics.

Example

# Display ARP entry statistics.

<Huawei> display arp statistics all
Dynamic:1       Static:0
Table 7-15  Description of the display arp statistics all command output

Item

Description

Dynamic

Number of dynamic ARP entries.

Static

Number of static ARP entries.

display arp track

Function

The display arp track command displays changes of outbound interfaces in ARP entries learned by a VLANIF interface.

Format

display arp track

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

If the outbound interfaces change in ARP entries learned by a VLANIF interface, traffic may be interrupted. In this case, run the display arp track command to check changes of outbound interfaces and time of changes.

Precautions

After the display arp track command is executed, changes of ARP entries are displayed in the following situations:
  • Outbound interfaces in dynamic ARP entries learnt by the VLANIF interface change to other interfaces.

  • No outbound interface is specified in the static ARP entries. The outbound interface changes to other interfaces.

  • Dynamic ARP entries or static ARP entries in which no VLAN ID or outbound interface is specified are deleted.

Changes of ARP entries cannot be displayed in the following situations:
  • ARP entries change on a non-VLANIF interface.

  • New ARP entries are learnt.

  • The VLAN ID and outbound interface are manually specified in static ARP entries.

Example

# Display changes of ARP entries.

<Huawei> display arp track
Operate Flags: M - Modify, D - Delete 
---------------------------------------------------------------------------
Op IP-Address  MAC-Address     VLAN   Old-Port   New-Port   System-Time
---------------------------------------------------------------------------
M  10.1.1.1    0001-0001-0001  1000   Ethernet0/0/1  Ethernet1/0/2  08-19 12:10:12
D  10.2.1.100  0003-0003-0003  300               Ethernet1/0/3  08-19 12:12:12
Table 7-16  Description of the display arp track command output

Item

Description

Op

Operation identifier.
  • M: Modify, indicating that the outbound interface changes.

  • D: Delete, indicating that the ARP entry is deleted.

IP-Address

IP address in the ARP entry.

MAC-Address

MAC address in the ARP entry.

VLAN

ID of the VLAN to which the VLANIF interface belongs.

Old-Port

Original outbound interface in the ARP entry.

New-Port

New outbound interface in the ARP entry.

System-Time

System time when the outbound interface changes.

display arp vpn-instance

Function

The display arp vpn-instance command displays ARP entries of a specified VPN instance.

Format

display arp vpn-instance vpn-instance-name [ dynamic | static ]

Parameters

Parameter Description Value
vpn-instance-name Specifies the VPN instance name. The value must be an existing VPN instance.
dynamic Displays dynamic ARP entries. -
static Displays static ARP entries. -

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

To monitor dynamic ARP entries or locate the faults in ARP, you can run this command to check the ARP entries.

Example

# Display all the ARP entries of VPN r1.

<Huawei> display arp vpn-instance r1 
IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE
                                          VLAN/CEVLAN PVC
------------------------------------------------------------------------------
192.168.1.11    0000-0a41-0201            I -         Eth1/0/0       r1
192.168.1.1     0000-0a41-0200  12        D-6         Eth1/0/0       r1
------------------------------------------------------------------------------
Total:2         Dynamic:1       Static:0    Interface:1                
Table 7-17  Description of the display arp vpn-instance command output

Item

Description

IP ADDRESS

IP address in the ARP entry.

MAC ADDRESS

MAC address in the ARP entry.

If the field is Incomplete, the entry is a fake ARP entry. If a large number of ARP Miss messages are sent to the upper-layer software, the system resources will be exhausted in processing the ARP Miss messages. To resolve this problem, the system automatically generates ARP fake entries instead of ARP entries.

You can run the arp-fake expire-time command to configure the aging time of fake ARP entries.

EXPIRE(M)

Remaining lifetime of the ARP entry, in minutes.

TYPE

ARP entry type and slot ID of the LPU that obtains the entry. The entry type contains 3 bits. The first bit can be any of the following:
  • I: Interface, indicating the MAC address of the interface

  • D: Dynamic, indicating the dynamic entry obtained through the ARP packet

  • S: Static, indicating the static entry obtained through static configuration

The second bit can only be F, indicating that the entry is reported to the routing module, the route to this IP address is calculated, and entries in the FIB are correspondingly updated.
NOTE:

If the entry is not reported to the routing module, this field displays "-". For the ARP entry with the type as "I", this flag bit does not exist.

The third bit indicates the slot ID of the LPU that obtains the entry.
NOTE:

For the ARP entry with the type as "I" or "S", this field displays "-".

VPN-INSTANCE

Name of the VPN instance to which the ARP entry belongs. The value is set using the ip vpn-instance command.

INTERFACE

Type and number of the interface that has learnt ARP entries.

VLAN/CEVLAN

ID of the VLAN to which the ARP entry belongs. The value is set using the vlan command.

PVC

Interface where the PVC exists and the corresponding VPI/VCI.

Total

Number of ARP entries.

Dynamic

Number of dynamic ARP entries.

Static

Number of static ARP entries.

Interface

Number of ARP entries of the local interface.

display mac-address multiport

Function

The display mac-address multiport command displays the configured multi-interface MAC address entries.

Format

display mac-address multiport [ [ mac-address ] vlan vlan-id ] [ total-number ]

Parameters

Parameter Description Value
mac-address Displays the specified multi-interface MAC address entry. The value is in H-H-H format. An H contains 1 to 4 hexadecimal digits.
vlan vlan-id Displays multi-interface MAC address entries in the specified VLAN.

The value is an integer that ranges from 1 to 4094.

total-number Displays the total number of multi-interface MAC address entries. -

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run this command to view the configured multi-interface MAC address entries. If no MAC address or VLAN is specified, the system displays all multi-interface MAC address entries. You can configure multi-interface MAC address entries using the mac-address multiport interface or mac-address multiport command.

Example

# Display multi-interface MAC address entries in VLAN 100.

<Huawei> display mac-address multiport vlan 100
--------------------------------------------------------------------------------                                                    
MAC Address       VLANID    Out-Interface                                                                                           
--------------------------------------------------------------------------------                                                    
03bf-2100-2200    100       Ethernet5/0/1                                                                                           
                            Ethernet5/0/2                                                                                           
                                            2 port(s)                                                                               
--------------------------------------------------------------------------------                                                    
 Total Group(s) : 1  

# Display the multi-interface MAC address entry matching MAC address 03bf-0a80-f6fc in VLAN 100.

<Huawei> display mac-address multiport 03bf-0a80-f6fc vlan 100
--------------------------------------------------------------------------------                                                    
MAC Address       VLANID    Out-Interface                                                                                           
--------------------------------------------------------------------------------                                                    
03bf-2100-2200    100       Ethernet5/0/1                                                                                           
                            Ethernet5/0/2                                                                                           
                                            2 port(s)                                                                               
--------------------------------------------------------------------------------                                                    
 Total Group(s) : 1  

# Display the number of configured multi-interface MAC address entries.

<Huawei> display mac-address multiport total-number
Total number of mac-address : 1     
Table 7-18  Description of the display mac-address multiport command output

Item

Description

MAC Address

Destination MAC address.

VLANID

VLAN to which the outbound interface belongs.

Out-Interface

Outbound interface.

Total Group(s)

Total number of multi-interface MAC address entries.

Total number of mac-address

Total number of multi-interface MAC address entries.

display snmp-agent trap feature-name arp all

Function

The display snmp-agent trap feature-name arp all command displays all trap messages of the ARP module.

Format

display snmp-agent trap feature-name arp all

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The Simple Network Management Protocol (SNMP) is a standard network management protocol widely used on TCP/IP networks. It uses a central computer (a network management station) that runs network management software to manage network elements. The management agent on the network element automatically reports traps to the network management station. After that, the network administrator immediately takes measures to resolve the problem.

After running the snmp-agent trap enable feature-name arp command to enable or disable a trap function of the ARP module, run the display snmp-agent trap feature-name arp all command to check the status of all trap functions of the ARP module.

Example

# Display all trap messages of the ARP module.

<Huawei>display snmp-agent trap feature-name arp all
------------------------------------------------------------------------------  
Feature name: ARP                                                               
Trap number : 6                                                                 
------------------------------------------------------------------------------  
Trap name                       Default switch status   Current switch status   
hwEthernetARPSpeedLimitAlarm    on                      on                      
hwEthernetARPThresholdExceedAlarm                                               
                                on                      on                      
hwEthernetARPThresholdResumeAlarm                                               
                                on                      on                      
hwEthernetARPIPConflictEvent    on                      on                      
hwEthernetARPLearnStopAlarm     on                      on                      
hwEthernetARPLearnResumeAlarm   on                      on                      
Table 7-19  Description of the display snmp-agent trap feature-name arp all command output

Item

Description

Feature name

Name of the module to which a trap message belongs.

Trap number

Number of trap messages.

Trap name

Name of a trap message of the ARP module:

  • hwEthernetARPSpeedLimitAlarm: alarm of ARP speed limit. It is a non-excessive trap.
  • hwEthernetARPThresholdExceedAlarm: alarm of the number of ARP entries exceeding the upper threshold.
  • hwEthernetARPThresholdResumeAlarm: alarm of the number of ARP entries falling below the upper threshold.
  • hwEthernetARPIPConflictEvent: alarm of the IP address confliction.
  • hwEthernetARPLearnStopAlarm: alarm of stopping learning ARP entries because the board memory usage reaches the threshold.
  • hwEthernetARPLearnResumeAlarm: clear alarm of stopping learning ARPpackets because the board memory usage falls below the threshold.

Default switch status

Status of the default trap switch:
  • on: indicates that the trap function is enabled.
  • off: indicates that the trap function is disabled.

Current switch status

Status of the current trap switch:
  • on: indicates that the trap function is enabled.
  • off: indicates that the trap function is disabled.

l2-topology detect enable

Function

The l2-topology detect enable command enables Layer 2 topology detection.

The undo l2-topology detect enable command disables Layer 2 topology detection.

By default, Layer 2 topology detection is disabled.

Format

l2-topology detect enable

undo l2-topology detect enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

After the l2-topology detect enable command is run, all ARP entries in the VLAN are updated if the Layer 2 interface changes from Down to Up.

Example

# Enable Layer 2 topology detection.

<Huawei> system-view
[Huawei] l2-topology detect enable

mac-address multiport

Function

The mac-address multiport command configures a multi-interface MAC address entry in the interface view.

The undo mac-address multiport command deletes a multi-interface MAC address entry in the interface view.

By default, no multi-interface MAC address entry is configured.

Format

mac-address multiport mac-address vlan vlan-id

undo mac-address multiport mac-address vlan vlan-id

Parameters

Parameter Description Value
mac-address Specifies a MAC address.

The value is in H-H-H format. An H contains 1 to 4 hexadecimal digits.

vlan vlan-id Specifies a VLAN to which an interface belongs.

The value is an integer that ranges from 1 to 4094.

Views

Ethernet interface view, GE interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

All servers in an NLB group share a virtual IP address and a virtual MAC address. When a device functions as the access gateway and directly connects to the NLB group, the device needs to forward packets destined for the virtual IP address to all servers in the NLB group. You can run the mac-address multiport or mac-address multiport interface command to configure a multi-interface MAC address entry, and run the arp static command to configure a short static ARP entry. After the configurations, the device determines the virtual MAC address matching the virtual IP address and the VLAN to which the NLB servers belong. Then the device determines the outbound interfaces by searching the MAC address table based on the virtual MAC address and VLAN. The device can communicate with the NLB servers.

Prerequisites

A VLAN has been created, and the interface has been added to the VLAN.

Precautions

The VLAN cannot be a super-VLAN, sub-VLAN, or control VLAN of a SEP segment.

When you run the mac-address multiport command to configure a multi-interface MAC address entry, ensure that the specified MAC address and VLAN ID are simultaneously different from those in a static MAC address entry or a blackhole MAC address entry.

Example

# Configure a multi-interface MAC address entry with the destination MAC address being 03bf-2100-2200 on Ethernet0/0/1 in VLAN 100.

<Huawei> system-view
[Huawei] vlan batch 100
[Huawei] interface ethernet 0/0/1
[Huawei-Ethernet0/0/1] port link-type access
[Huawei-Ethernet0/0/1] port default vlan 100
[Huawei-Ethernet0/0/1] mac-address multiport 03bf-2100-2200 vlan 100

mac-address multiport interface

Function

The mac-address multiport interface command configures a multi-interface MAC address entry in the system view.

The undo mac-address multiport interface command deletes a multi-interface MAC address entry in the system view.

By default, no multi-interface MAC address entry is configured on a device.

Format

mac-address multiport mac-address interface { interface-type interface-number1 [ to interface-type interface-number2 ] } &<1-5> vlan vlan-id

undo mac-address multiport mac-address interface { interface-type interface-number1 [ to interface-type interface-number2 ] } &<1-5> vlan vlan-id

undo mac-address multiport { all | [ mac-address ] vlan vlan-id }

Parameters

Parameter Description Value
mac-address Specifies a MAC address.

The value is in H-H-H format. An H contains 1 to 4 hexadecimal digits.

interface-type interface-number1 [ to interface-type interface-number2 ]
Specifies the interface type and number.
  • interface-type specifies the interface type.
  • interface-number1 specifies the number of the first interface for which a multi-interface MAC address entry needs to be configured.
  • interface-number2 specifies the number of the last interface for which a multi-interface MAC address entry needs to be configured. The value of interface-number2 must be greater than that of interface-number1, and the two values determine an interface range.
-
vlan vlan-id Specifies a VLAN to which interfaces belong.

The value is an integer that ranges from 1 to 4094.

all Specifies all multi-interface MAC address entries. -

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

All servers in an NLB group share a virtual IP address and a virtual MAC address. When a device functions as the access gateway and directly connects to the NLB group, the device needs to forward packets destined for the virtual IP address to all servers in the NLB group. You can run the mac-address multiport interface or mac-address multiport command to configure a multi-interface MAC address entry, and run the arp static command to configure a short static ARP entry. After the configurations, the device determines the virtual MAC address matching the virtual IP address and the VLAN to which the NLB servers belong. Then the device determines the outbound interfaces by searching the MAC address table based on the virtual MAC address and VLAN. The device can communicate with the NLB servers.

Prerequisites

A VLAN has been created, and the interfaces have been added to the VLAN.

Precautions

The VLAN cannot be a super-VLAN, sub-VLAN, or control VLAN of a SEP segment.

When you run the mac-address multiport interface command to configure a multi-interface MAC address entry, ensure that the specified MAC address and VLAN ID are simultaneously different from those in a static MAC address entry or a blackhole MAC address entry.

Example

# Configure a multi-interface MAC address entry with the destination MAC address being 03bf-2100-2200 and outbound interfaces being Ethernet2/0/0 and Ethernet2/0/1 in VLAN 100.

<Huawei> system-view
[Huawei] interface ethernet 2/0/0
[Huawei-Ethernet2/0/0] port link-type access
[Huawei-Ethernet2/0/0] quit
[Huawei] interface ethernet 2/0/1
[Huawei-Ethernet2/0/1] port link-type access
[Huawei-Ethernet2/0/1] quit
[Huawei] vlan 100
[Huawei-vlan100] port ethernet 2/0/0 to 2/0/1
[Huawei-vlan100] quit
[Huawei] mac-address multiport 03bf-2100-2200 interface ethernet 2/0/0 to ethernet 2/0/1 vlan 100

reset arp

Function

The reset arp command deletes ARP entries in the ARP mapping table.

Format

reset arp { all | dynamic [ ip ip-address [ vpn-instance vpn-instance-name ] ] | interface interface-type interface-number [ ip ip-address ] | static }

Parameters

Parameter Description Value
all Deletes all the ARP entries. -
dynamic Deletes dynamic ARP entries. -
interface interface-type interface-number Specifies the type and number of an interface.
  • interface-type specifies the type of the interface.
  • interface-number specifies the number of the interface.
-
ip ip-address

Deletes dynamic ARP entries of a specified interface and with a specified IP address.

If an interface learns excessive ARP entries, you can specify this parameter to delete a specified ARP entry.

The value is in dotted decimal notation.
vpn-instance vpn-instance-name Specify the vpn-instance name. The value must be an existing VPN instance.
static Deletes static ARP entries.Static ARP entries cannot be restored after being cleared. Exercise caution when you clear static ARP entries. -

Views

User view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a device is attacked, it learns a large number of invalid ARP entries. In this case, you can use this command to delete ARP entries.

Precautions

  • The reset arp command deletes mappings between IP addresses and MAC addresses. As a result, users may fail to access some nodes.

Example

# Delete dynamic ARP entries in the ARP mapping table.

<Huawei> reset arp dynamic

# Delete ARP entries of Ethernet0/0/1 with the IP address 10.1.1.1 in the ARP mapping table.

<Huawei> reset arp interface ethernet 0/0/1 ip 10.1.1.1
Related Topics

reset arp packet statistics

Function

The reset arp packet statistics command clears the statistics on ARP packets.

Format

reset arp packet statistics

Parameters

None

Views

User view

Default Level

1: Monitoring level

Usage Guidelines

You can run the display arp packet statistics command to display the statistics on ARP packets. To obtain correct statistics, run the reset arp packet statistics command to clear existing statistics first.

The reset arp packet statistics command clears the ARP packet statistics only on the main control board.

Example

# Clear the statistics on all ARP packets.

<Huawei> reset arp packet statistics

snmp-agent trap enable feature-name arp

Function

The snmp-agent trap enable feature-name arp command enables the trap function for the ARP module.

The undo snmp-agent trap enable feature-name arp command disables the trap function for the ARP module.

By default, the trap function is enabled for the ARP module.

Format

snmp-agent trap enable feature-name arp [ trap-name { hwethernetarpspeedlimitalarm | hwethernetarpthresholdexceedalarm | hwethernetarpthresholdresumealarm | hwethernetarpipconflictevent } ]

undo snmp-agent trap enable feature-name arp [ trap-name { hwethernetarpspeedlimitalarm | hwethernetarpthresholdexceedalarm | hwethernetarpthresholdresumealarm | hwethernetarpipconflictevent } ]

Parameters

Parameter Description Value
trap-name Enables the traps of ARP events of specified types. -
hwethernetarpspeedlimitalarm Enables the alarm of ARP speed limit. It is a non-excessive trap. -
hwethernetarpthresholdexceedalarm Enables the alarm of the number of ARP entries exceeding the upper threshold. -
hwethernetarpthresholdresumealarm Enables the alarm of the number of ARP entries falling below the upper threshold. -
hwethernetarpipconflictevent Enables the alarm of IP address confliction. -

Views

System view

Default Level

3: Management level

Usage Guidelines

If you do not specify trap-name, all traps of the ARP module will be enabled.

Example

# Enables the trap function of ARP speed limit.

<Huawei> system-view
[Huawei] snmp-agent trap enable feature-name arp trap-name hwethernetarpspeedlimitalarm
Translation
Download
Updated: 2019-05-29

Document ID: EDOC1000097293

Views: 90891

Downloads: 124

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next