H3C SecPath Series, Справочник по командам

Страница: 8 / 27

1
ARP attack defense configuration commands
ARP automatic scanning and fixed ARP
configuration commands
arp fixup
Syntax
arp fixup
View
System view
Default Level
2: System level
Parameters
None
Description
Use the arp fixup command to change dynamic ARP entries into static ARP entries.
Note the following:
• The static ARP entries changed from dynamic ARP entries have the same attributes as the static ARP
entries manually configured. Use the
arp fixup command to change the recently created dynamic
ARP entries into static.
• The number of static ARP entries changed from dynamic ARP entries is restricted by the number of
static ARP entries that the firewall supports. As a result, the firewall may fail to change all dynamic
ARP entries into static.
•
Suppose that the number of dynamic ARP entries is D and that of the existing static ARP entries is S .
When the dynamic ARP entries are changed into static, new dynamic ARP entries may be created
(suppose the number is M ) and some of the dynamic ARP entries may be aged out (suppose the
number is N ). After the process is complete, the number of static ARP entries is D + S + M – N .
•
To delete a specific static ARP entry changed from a dynamic one, use the undo arp ip-address
[ vpn-instance-name ] command. To delete all such static ARP entries, use the reset arp all or reset
arp static command.
Examples
# Enable Fixed ARP.
<Sysname> system-view
[Sysname] arp fixup