HP MSR2000/3000/4000 Router Series Security Command Reference

407
Predefined user roles
network-admin
Usage guidelines
The static ARP entries changed from dynamic ARP entries have the same attributes as the manually
configured static ARP entries.
The number of static ARP entries changed from dynamic ARP entries is restricted by the number of static
ARP entries that the device supports. As a result, the device might fail to change some dynamic ARP
entries into static ARP entries.
Suppose that the number of dynamic ARP entries is D and that of the existing static ARP entries is S.
When the dynamic ARP entries are being changed into static, new dynamic ARP entries might be created
(suppose the number is M) and some of the dynamic ARP entries might be aged out (suppose the number
is N). After the change process is completed, the number of static ARP entries is D + S + M – N.
To delete a specific static ARP entry changed from a dynamic one, use the undo arp ip-address
[ vpn-instance-name ] command. To delete all such static ARP entries, use the reset arp all or reset arp
static command.
Examples
# Enable fixed ARP.
<Sysname> system-view
[Sysname] arp fixup
arp scan
Use arp scan to enable ARP automatic scanning in a specific address range.
Syntax
arp scan [ start-ip-address to end-ip-address ]
Views
Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, VLAN interface view
Predefined user roles
network-admin
Parameters
start-ip-address: Specifies the start IP address of the scanning range.
end-ip-address: Specifies the end IP address of the scanning range. The end IP address must be higher
than or equal to the start IP address.
Usage guidelines
If the start and end IP addresses are specified, the device scans the neighbor IP addresses in the specified
address range to learn ARP entries. If the sending interface has multiple IP addresses falling within the
specified address range, the sender IP address in the sent ARP requests is the interface address on the
smallest network segment.
If no address range is specified, the device only scans neighbors on the network where the primary IP
address of the interface resides. The sender IP address in the ARP requests is the primary IP address of
the interface.