No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Configuration Guide - IP Service

CloudEngine 12800 and 12800E V200R005C00

This document describes the configurations of IP Service, including IP address, ARP, DHCP, DNS, IP performance optimization, IPv6, DHCPv6, and IPv6 DNS.

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Static ARP

Configuring Static ARP


Static ARP entries improve communication security. Static ARP entries are manually configured and maintained. They cannot be aged and overridden by dynamic ARP entries. Therefore, static ARP entries improve communication security. Static ARP entries ensure communication between the local device and a specified device by using a specified MAC address so that attackers cannot modify mappings between IP addresses and MAC addresses in static ARP entries.

Static ARP entries are classified into short and long entries.
  • Short static ARP entries

    The short static ARP entries cannot be used to forward messages directly. Users send ARP request messages first. If the source IP and MAC addresses of the received reply messages are the same as the configured IP and MAC addresses, the interface receiving ARP reply messages is added into the static ARP entries. Therefore, devices can use this interface to forward messages directly.

  • Long static ARP entries

    When configuring long static ARP entries, configure IP and MAC addresses as well as the VLAN and the outbound interface through which devices send messages based on the ARP entries. Long static ARP entries are directly used to forward messages.


Static ARP entries cannot be modified. However, the configuration workload is heavy. Static ARP entries cannot apply to a network where IP addresses of hosts may change or a small-sized network.


  1. Run system-view

    The system view is displayed.

  2. (Optional) Run arp static limit maximum maximum

    The maximum number of static ARP entries allowed to be configured on the switch is set.

    By default, a maximum of 16384 static ARP entries can be configured on a switch.


    CE12800E configured with FD-X series cards does not support this command.

  3. Run arp static ip-address mac-address [ vpn-instance vpn-instance-name ]

    Or run arp static ip-address mac-address { vlan vlan-id [ interface interface-type interface-number ] | interface interface-type interface-number }

    A static ARP entry is configured.

    By default, the ARP mapping table is empty and address mappings are obtained using dynamic ARP.

    If you want the device and the specified user to communicate only using certain fixed IP and MAC addresses, configuring short static ARP entries is recommended. If you want to further specify the interface only through which the user can communicate with the device in a VLAN, configuring long static ARP entries is recommended.

  4. Run commit

    The configuration is committed.

Verifying the Configuration

After configuring the static ARP entries is complete, run the following commands to check the configuration.

  • Run the display arp interface interface-type interface-number command to check ARP mapping entries of a specified interface.

  • Run the display arp [ network network-address [ network-mask | mask-length ] ] static command to check static ARP mapping entries.

  • Run the display arp vpn-instance vpn-instance-name static command to check static ARP mapping entries of a specified VPN instance.

  • Run the display arp vlan vlan-id interface interface-type interface-number command to check ARP mapping entries of a specified VLAN.

Updated: 2019-04-18

Document ID: EDOC1100039535

Views: 47726

Downloads: 27

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Previous Next