No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Configuration Guide - VXLAN

CloudEngine 12800 and 12800E V200R003C00

This document describes the configurations of VXLAN.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
(Optional) Configuring Layer 2 Proxy ARP

(Optional) Configuring Layer 2 Proxy ARP

When tenants access each other for the first time, they send ARP request packets. These packets are broadcast on Layer 2 networks, which may cause a broadcast storm. To minimize the number of broadcast ARP packets, Layer 2 proxy ARP can be configured on Layer 2 gateways.


On a VXLAN, after a Layer 2 gateway receives an ARP request packet, it broadcasts the packet within the BD. If the Layer 2 gateway receives a large number of ARP request packets within a period and broadcasts the packets, excessive ARP request packets are forwarded on the VXLAN, consuming excessive network resources and causing network congestion. As a result, the network performance deteriorates, and user services are affected. To address this problem, Layer 2 proxy ARP can be configured on Layer 2 gateways. The basic principles of Layer 2 proxy ARP are as follows: A Layer 2 gateway listens to a received ARP packet and generates an ARP snooping binding entry to record the source user information, including the packet's source IP address, source MAC address, inbound interface. After receiving an ARP request packet, the Layer 2 gateway preferentially responds to the request based on the information in the ARP snooping binding entry.

Perform the following steps on each VXLAN Layer 2 gateway.

  • Layer 2 proxy ARP can be configured only on IPv4 overlay networks.

  • A VBDIF interface cannot be created for a BD with Layer 2 proxy ARP configured.


  1. Run system-view

    The system view is displayed.

  2. Run bridge-domain bd-id

    The BD view is displayed.

  3. Run arp l2-proxy enable

    Layer 2 proxy ARP is enabled.

    By default, Layer 2 proxy ARP is not enabled.

  4. (Optional) Run arp collect host enable

    BGP EVPN is enabled to collect host information per BD.

    By default, BGP EVPN is not enabled to collect host information per BD.

    If a VXLAN tunnel is established in BGP EVPN mode, performing this step on VXLAN Layer 2 gateways is recommended. This configuration allows VXLAN Layer 2 gateways to synchronize the locally listened user ARP information with each other through BGP EVPN routes and complement information in their own ARP snooping binding entries, which maximizes the function of Layer 2 proxy ARP.

  5. (Optional) Run arp l2-proxy timeout expire-time

    An aging time is configured for ARP snooping binding entries.

    By default, the aging time of ARP snooping binding entries is 900s.

    Each ARP snooping binding entry has a life cycle, called aging time. If an ARP snooping binding entry is not updated before its aging time expires, the entry will be deleted. If the device stores a large number of ARP snooping binding entries, the CPU resources are wasted, and ARP snooping binding entries for new users cannot be generated. To resolve this problem, perform this step to set an aging time, which allows ARP snooping binding entries to be updated regularly.

  6. Run commit

    The configuration is committed.

Updated: 2019-05-05

Document ID: EDOC1100004207

Views: 30906

Downloads: 66

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next