Configuring A Static Arp Entry - HP 10500 Series Configuration Manual

Dynamic ARP entry
ARP automatically creates and updates dynamic entries. A dynamic ARP entry is removed when its aging
timer expires or the output interface goes down, and it can be overwritten by a static ARP entry.
Static ARP entry
A static ARP entry is manually configured and maintained. It does not age out, and cannot be
overwritten by a dynamic ARP entry.
Static ARP entries protect communication between devices, because attack packets cannot modify the
IP-to-MAC mapping in a static ARP entry.
Static ARP entries can be classified into long and short ARP entries.
To configure a long static ARP entry, specify the IP address, MAC address, VLAN, and output
•
interface. A long static ARP entry is directly used for forwarding matching packets. To communicate
with a host by using a fixed IP-to-MAC mapping through a specific interface in a specific VLAN,
configure a long static ARP entry on the device.
• To configure a short static ARP entry, you only need to specify the IP address and MAC address.
If the output interface is a Layer 3 Ethernet interface, the short ARP entry can be directly used
to forward matching packets.
If the output interface is a VLAN interface, the device first sends an ARP request whose target
IP address is the IP address of the short entry. If the sender IP and MAC addresses in the
received ARP reply match the IP and MAC addresses of the short static ARP entry, the device
adds the interface receiving the ARP reply to the short static ARP entry, and then uses the
resolved entry to forward the matching IP packets.
To communicate with a host by using a fixed IP-to-MAC mapping, configure a short static ARP
entry on the device.

Configuring a static ARP entry

A static ARP entry is effective when the device works normally. If a VLAN or VLAN interface is deleted,
all long static ARP entries in the VLAN are deleted, and all resolved short static ARP entries in the VLAN
becomes unresolved.
Follow these guidelines when you configure a long static ARP entry:
• The vlan-id argument must be the ID of an existing VLAN where the ARP entry resides. The specified
Ethernet interface must belong to that VLAN. The VLAN interface of the VLAN must be created.
The IP address of the VLAN interface of the VLAN specified by the vlan-id argument must belong to
•
the same subnet as the IP address specified by the ip-address argument.
To configure a static ARP entry:
Step
1. Enter system view.
2. Configure a static
ARP entry.
Command
system-view
•
Configure a long static ARP entry:
arp static ip-address mac-address vlan-id
interface-type interface-number [ vpn-instance
vpn-instance-name ]
•
Configure a short static ARP entry:
arp static ip-address mac-address
[ vpn-instance vpn-instance-name ]
3
Remarks
N/A
Use either command.