H3C SecPath F1800-A Operation Manual page 227

Operation Manual - Network and Routing Protocol
H3C SecPath F1800-A Firewall
After the ARP proxy is used, the ARP aging time of the host must be shortened to
make the expired ARP items invalid as soon as possible. This can reduce the number
of the packets which are sent to the router but cannot be forwarded by the router.
1.3.4
Configuring Dynamic ARP
Dynamic ARP entries are generated when the router are working, which need not be
created manually. You need to set aging detect times and time-out time for dynamic
ARP entries.
Configuration of dynamic ARP includes:
Setting aging detect times of ARP entries
Setting time-out time of ARP entries
Enabling learning capability of multicast MAC addresses on an interface
I. Setting Aging Detect Times of ARP Entries
Do as follows in Ethernet interface view, and virtual Ethernet interface view.
Table 1-7 Setting aging detect times of ARP entries
Set aging detect times of ARP entries.
Restore the default value of aging detect times of ARP
entries.
II. Setting the Time-out Time of ARP Entries
Do as follows in Ethernet interface view and virtual Ethernet interface view.
Table 1-8 Setting the time-out time of dynamic ARP entries
Set the time-out time of ARP entries.
Restore the default value of the time-out time of ARP
entries.
III. Enabling Learning Capability of Multicast MAC Addresses on an Interface
Do as follows in Ethernet interface view and GE interface view.
Chapter 1 IP Address and IP Performance
Action
Action
5-10
Configuration
Command
arp detect-times times
undo arp detect-times
Command
arp expire-time time
undo arp expire-time