HP VPN Firewall Appliances Network Management Configuration Guide

252
With this feature enabled, the device calculates the subnet address by using the default mask of the class
A network where 10.10.10.5/24 resides. Because 10.10.10.5/24 is on the same class A network as
10.11.11.1/8, VLAN-interface 10 can learn the sender IP and MAC addresses in the request.
To enable natural mask support for ARP requests:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable natural mask support
for ARP requests.
naturemask-arp enable Disabled by default.
Displaying and maintaining ARP
CAUTION:
Clearing ARP entries from the ARP table might cause communication failures.
Task Command Remarks
Display ARP entries in the
ARP table.
display arp [ [ all | dynamic | static ] | vlan vlan-id
| interface interface-type interface-number ] [ count
| verbose ] [ | { begin | exclude | include }
regular-expression ]
Available in any view.
Display the ARP entry for a
specific IP address.
display arp ip-address [ verbose ] [ | { begin |
exclude | include } regular-expression ]
Available in any view.
Display the ARP entries for a
specific VPN instance.
display arp vpn-instance vpn-instance-name
[ count ] [ | { begin | exclude | include }
regular-expression ]
Available in any view.
Display the aging timer of
dynamic ARP entries.
display arp timer aging [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Clear ARP entries from the
ARP table.
reset arp { all | dynamic | static | interface
interface-type interface-number }
Available in user view.
ARP entry configuration example
Network requirements
As shown in Figure 169, hosts are connected to the firewall, which is connected to the router through
interface GigabitEthernet 0/1 in VLAN 10. The IP and MAC addresses of the router are 192.168.1.1/24
and 00e0-fc01-0000 respectively.
To prevent malicious users from attacking the switch and enhance security for communications between
the router and firewall, configure a static ARP entry for the router on the firewall.