R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

251
Task Command Remarks
Clear ARP entries from the ARP
table.
reset arp { all | dynamic | static | interface
interface-type interface-number }
Available in user view
NOTE:
Clearing ARP entries from the ARP table may cause communication failures.
Static ARP entry configuration example
Network requirements
As shown in Figure 156, hosts are connected to the Firewall, which is connected to the router through
interface GigabitEthernet 0/1 in VLAN 10. The IP and MAC addresses of the router are 192.168.1.1/24
and 00e0-fc01-0000 respectively.
To prevent malicious users from attacking the Firewall and enhance security for communications between
the router and the Firewall, configure a static ARP entry for the router on the Firewall.
Figure 161 Network diagram
Configuring the Firewall
# Create VLAN 10.
<Firewall> system-view
[Firewall] vlan 10
[Firewall-vlan10] quit
# Add interface GigabitEthernet 0/1 to VLAN 10.
[Firewall] interface GigabitEthernet 0/1
[Firewall-GigabitEthernet0/1] port link-type trunk
[Firewall-GigabitEthernet0/1] port trunk permit vlan 10
[Firewall-GigabitEthernet0/1] quit
# Create interface VLAN-interface 10 and configure its IP address.
[Firewall] interface vlan-interface 10
[Firewall-vlan-interface10] ip address 192.168.1.2 8
[Firewall-vlan-interface10] quit