Configuring Arp Snooping; Configuration Procedure; Displaying And Maintaining Arp Snooping - H3C MSR 2600 Configuration Manual

Layer 3
Hide thumbs Also See for MSR 2600:
Table of Contents

Advertisement

Configuring ARP snooping

ARP snooping is not supported in the current release, and it is reserved for future use.
ARP snooping is used in Layer 2 switching networks. It creates ARP snooping entries by using information
in ARP packets. ARP fast-reply and manual-mode MFF (MAC–Forced Forwarding) can use the ARP
snooping entries. For more information about MFF, see Security Configuration Guide.
If you enable ARP snooping on a VLAN, ARP packets received by any interface in the VLAN are
redirected to the CPU. The CPU uses the sender IP and MAC addresses of the ARP packets, and receiving
VLAN and port to create ARP snooping entries.
The aging time and valid period of an ARP snooping entry are 25 minutes and 15 minutes. If an ARP
snooping entry is not updated in 15 minutes, it becomes invalid and cannot be used. After that, if an ARP
packet matching the entry is received, the entry becomes valid, and its aging timer restarts. If the aging
timer of an ARP entry expires, the entry is removed.
If the ARP snooping device receives an ARP packet that has the same sender IP address as a valid ARP
snooping entry, but with a different sender MAC address, it assumes it has been attacked. The ARP
snooping entry becomes invalid, and is removed after 25 minutes.

Configuration procedure

To enable ARP snooping:
Step
1.
Enter system view.
2.
Enable ARP snooping.
To enable ARP snooping for a VLAN:
Step
1.
Enter system view.
2.
Enter VLAN view.
3.
Enable ARP snooping

Displaying and maintaining ARP snooping

Execute display commands in any view and reset commands in user view.
Task
Display ARP snooping entries (MSR
2600/MSR 3600).
Command
system-view
arp snooping enable
Command
system-view
vlan vlan-id
arp snooping enable
Command
display arp snooping [ vlan vlan-id ] [ count ]
display arp snooping ip ip-address
14
Remarks
N/A
By default, ARP snooping is disabled.
Remarks
N/A
N/A
By default, ARP snooping is disabled.

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents