Setup guide

entries. Normally the table is built dynamically, but to increase network security, it can be built
statically by means of adding static entries.
Property Description
address (IP address) - IP address to be mapped
interface (name) - interface name the IP address is assigned to
mac-address (MAC address; default: 00:00:00:00:00:00) - MAC address to be mapped to
Notes
Maximal number of ARP entries is 1024.
If arp feature is turned off on the interface, i.e., arp=disabled is used, ARP requests from clients
are not answered by the router. Therefore, static arp entry should be added to the clients as well. For
example, the router's IP and MAC addresses should be added to the Windows workstations using
the arp command:
C:\> arp -s 10.5.8.254 00-aa-00-62-c6-09
If arp property is set to reply-only on the interface, then router only replies to ARP requests.
Neighbour MAC addresses will be resolved using /ip arp statically set table only
Example
[admin@Wandy] ip arp> add address=10.10.10.10 interface=ether2 mac-address=06 \
\... :21:00:56:00:12
[admin@Wandy] ip arp> print
Flags: X - disabled, I - invalid, H - DHCP, D - dynamic
# ADDRESS MAC-ADDRESS INTERFACE
0 D 2.2.2.2 00:30:4F:1B:B3:D9 ether2
1 D 10.5.7.242 00:A0:24:9D:52:A4 ether1
2 10.10.10.10 06:21:00:56:00:12 ether2
[admin@Wandy] ip arp>
If static arp entries are used for network security on an interface, you should set arp to 'reply-only'
on that interface. Do it under the relevant /interface menu:
[admin@Wandy] ip arp> /interface ethernet set ether2 arp=reply-only
[admin@Wandy] ip arp> print
Flags: X - disabled, I - invalid, H - DHCP, D - dynamic
# ADDRESS MAC-ADDRESS INTERFACE
0 D 10.5.7.242 00:A0:24:9D:52:A4 ether1
1 10.10.10.10 06:21:00:56:00:12 ether2
[admin@Wandy] ip arp>
Proxy-ARP feature
Description
All physical interfaces, like Ethernet, Atheros and Prism (wireless), Aironet (PC), WaveLAN, etc.,
can be set to use the Address Resolution Protocol or not. The other possible setting is to use
Proxy-ARP feature. The Proxy-ARP means that the router will be listening to ARP requests on the
relevant interface and respond to them with it's own MAC address, if the requests matches any other
IP address of the router.
This can be usefull, for example, if you want to assign dial-in (ppp, pppoe, pptp) clients IP
addresses from the same address space as used on the connected LAN.