R3721-F3210-F3171-HP High-End Firewalls Attack Protection Command Reference-6PW101

3
source IP address of the ARP packet exists. If a matching ARP entry is found in the cache, the firewall
updates the ARP entry regardless of whether this function is enabled.
Examples
# Enable the gratuitous ARP packet learning function.
<Sysname> system-view
[Sysname] gratuitous-arp-learning enable
ARP automatic scanning and fixed ARP
configuration commands
arp fixup
Syntax
arp fixup
View
System view
Default level
2: System level
Parameters
None
Description
Use arp fixup to change the existing dynamic ARP entries into static ARP entries. You can use this
command again to change the dynamic ARP entries learned later into static.
The static ARP entries changed from dynamic ARP entries have the same attributes as the manually
configured static ARP entries.
The number of static ARP entries changed from dynamic ARP entries is restricted by the number of static
ARP entries that the device supports. As a result, the device may fail to change all dynamic ARP entries
into static ARP entries.
Suppose that the number of dynamic ARP entries is D and that of the existing static ARP entries is S.
When the dynamic ARP entries are changed into static, new dynamic ARP entries may be created
(suppose the number is M) and some of the dynamic ARP entries may be aged out (suppose the number
is N). After the process is complete, the number of static ARP entries is D + S + M – N.
To delete a specific static ARP entry changed from a dynamic one, use the undo arp ip-address
[ vpn-instance-name ] command. To delete all such static ARP entries, use the reset arp all or reset arp
static command.
Examples
# Enable Fixed ARP.
<Sysname> system-view
[Sysname] arp fixup