2
arp scan
Syntax
arp scan
[
start-ip-address
to
end-ip-address
]
View
Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, VLAN interface view
Default Level
2: System level
Parameters
start-ip-address
: Start IP address of the scanning range.
end-ip-address
: End IP address of the scanning range. The end IP address must be higher than or equal
to the start IP address.
Description
Use the
arp scan
command to enable ARP automatic scanning.
Note the following:
•
If start IP and end IP addresses are specified, the firewall scans the specific address range for
neighbors and learns their ARP entries. If not, the firewall only scans the network where the primary
IP address of the interface resides for neighbors.
•
The start IP address and end IP address must be on the same network as the primary IP address or
manually configured secondary IP addresses of the interface.
•
IP addresses already exist in ARP entries are not scanned.
•
ARP automatic scanning may take some time. To stop an ongoing scan, press
Ctrl
+
C
. Dynamic
ARP entries are created based on ARP replies received before the scan is terminated.
Examples
# Configure the firewall to scan the network where the primary IP address of GigabitEthernet 0/0 resides
for neighbors.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/0
[Sysname-GigabitEthernet0/0] arp scan
# Configure the firewall to scan the specific address range for neighbors.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/0
[Sysname-GigabitEthernet0/0] arp scan 1.1.1.1 to 1.1.1.20
