R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

195
Local proxy ARP
As shown in Figure 107, Host A and Host B belong to VLAN 2, but are isolated at Layer 2. Host A
connects to Ethernet 1/3 and Host B connects to Ethernet 1/1. Enable local proxy ARP on Firewall to
allow Layer 3 communication between the two hosts.
Figure 107 Application environment of local proxy ARP
In one of the following cases, you need to enable local proxy ARP:
• Hosts connecting to different isolated Layer 2 ports in the same VLAN need to communicate at Layer
3.
• If an isolate-user-VLAN is configured, hosts in different secondary VLANs of the isolate-user-VLAN
need to communicate at Layer 3.
Enabling proxy ARP
Follow these steps to enable proxy ARP in VLAN interface view/Ethernet interface view:
To do… Use the command…
Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
Required
Enable proxy ARP proxy-arp enable
Required
Disabled by default.
Follow these steps to enable local proxy ARP in VLAN interface view/Ethernet interface view:
To do… Use the command…
Remarks
Enter system view system-view —
Enter interface view interface interface-type interface-number Required
Enable local proxy ARP
local-proxy-arp enable [ ip-range startIP to
endIP ]
Required
Disabled by default.