ARP Local Proxy Configuration
253
local ARP proxy on an aggregation switch while configuring interface isolation function on
the layer-2 switch connected to it, all ip flow will be forwarded on layer 3 via the
aggregation switch. And due to the interface isolation, ARP messages will not be
forwarded within the vlan, which means other PCs will not receive it.
28.2
ARP Local Proxy Function Configuration Task List
1
．
Enable/disable ARP local proxy function
1
．
Enable/disable ARP local proxy function
Command
Explanation
Interface vlan mode
ip local proxy-arp
no ip local proxy-arp
Enable or disable ARP local proxy
function.
28.3
Typical Examples of ARP Local Proxy Function
As shown in the following figure, S1 is a medium/high-level layer-3 switch supporting
ARP local proxy, S2 is layer-2 access switches supporting interface isolation.
Considering security, interface isolation function is enabled on S2. Thus all downlink
ports of S2 is isolated from each other, making all ARP messages able to be forwarded
through S1. If ARP local proxy is enabled on S1, then all interfaces on S1 isolate ARP
while S1 serves as an ARP proxy. As a result, IP flow will be forwarded at layer 3 through
S1 instead of S2.