Configuring Proxy ARP Within a VLAN
Proxy ARP within a VLAN allows communication between devices in the same VLAN but configured with interface isolation.
Usage Scenario
If two users belong to the same VLAN but user isolation is configured in the VLAN, and communication is required between them, you can enable proxy ARP within the VLAN on the interfaces in the VLAN.
Configuring an IP Addresses for an Interface
The IP address assigned to an interface needs to be in the same network segment with the IP addresses of the users of all the VLANs associated to this interface.
Procedure
- Run system-view
The system view is displayed.
- Run interface interface-type interface-number [ .subinterface-number ]
The sub-interface view is displayed.
Proxy ARP within a VLAN can be configured on Ethernet sub-interfaces, GE sub-interfaces, Eth-Trunk sub-interfaces.
- Run ip address ip-address { mask | mask-length } [ sub ]
An IP address is configured for the sub-interface.
- Run commit
The configuration is committed.
(Optional) Associating the Sub-interface with a VLAN
Before you configure proxy ARP within a VLAN on Ethernet sub-interfaces, GE interfaces, or Eth-Trunk sub-interfaces, associate the sub-interface with a VLAN.
Enabling Proxy ARP Within a VLAN
To enable communication between isolated devices within the same VLAN, proxy ARP within the VLAN is required.
Procedure
- Run system-view
The system view is displayed.
- Run interface interface-type interface-number [ .subinterface-number ]
The sub-interface view is displayed.
- Run arp-proxy inner-sub-vlan-proxy enable
Proxy ARP within a VLAN is enabled on the sub-interface or VLANIF interface.
- Run commit
The configuration is committed.
Verifying the Configuration of Proxy ARP Within a VLAN
After configuring proxy ARP within a VLAN, verify the configuration.
Procedure
- Run the display arp interface interface-name command to check the ARP mapping table on a specified interface.
- Run the display arp slot slot-id command to check the ARP mapping table on the board in a specified slot.
- Run the display arp vpn-instance vpn-instance-name slot slot-id [ dynamic | static ] command to check the ARP mapping table for a specified VPN instance.