No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Fat AP and Cloud AP V200R010C00 Command Reference

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
arp fixup

arp fixup

Function

The arp fixup command enables fixed ARP on a specific interface so that the interface can convert generated dynamic ARP entries to static ARP entries.

Format

arp fixup

Parameters

None

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To prevent a network attacker from sending pseudo ARP packets to modify ARP entries on a device, run the arp fixup command on the VLANIF interface to enable fixed ARP. Running this command converts dynamic ARP entries that are generated on the interface to static ARP entries.

Prerequisites

ARP automatic scanning has been enabled using the arp scan command.

ARP automatic scanning is generally used with fixed ARP. A device can use ARP automatic scanning to generate dynamic ARP entries about all its neighbor devices. Then the device can use fixed ARP to convert the dynamic ARP entries to static ARP entries. This process prevents a network from attacks.

Precautions

  • The number of static ARP entries converted by fixed ARP must be below the upper limit of static ARP entries that a device can generate. If the device has a maximum of static ARP entries, subsequent dynamic ARP entries cannot be converted into static ones. The limit of static ARP entries may cause some dynamic ARP entries to be fixed. In this case, the device prompts you with an error message.
  • Like configured static ARP entries, static ARP entries converted by fixed ARP can be deleted one by one using the undo arp static command or deleted altogether using the reset arp command.

Example

# Enable fixed ARP.

<Huawei> system-view
[Huawei] interface vlanif 10
[Huawei-Vlanif10] arp fixup
Warning: This operation may generate configuration of static ARP, and take a lon
g time, press CTRL+C to break. Continue?[Y/N]:y                                 
Processing...                                                                   
Info: ARP fixup is completed. 
Translation
Download
Updated: 2019-11-21

Document ID: EDOC1100064352

Views: 212615

Downloads: 122

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next