H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – ARP
H3C S7500 Series Ethernet Switches Chapter 1
ARP Configuration
1-10
 Note:
If secondary IP addresses are configured for a VLAN interface, the specified maximum
number of IP addresses to be bound to a MAC address should be bigger than the total
number of the primary and secondary IP addresses of the VLAN interface.
1.2.9 Configuring Proxy ARP
Follow these steps to configure proxy ARP:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter VLAN
interface view
interface Vlan-interface
vlan-id
—
Enable proxy ARP
arp proxy enable
Required
By default, proxy ARP is
disabled.
Enable intra-VLAN
proxy ARP
arp proxy source-vlan
enable
Optional
By default, intra-VLAN proxy
ARP is disabled, and the proxy
ARP only processes inter-VLAN
ARP requests.
1.2.10 Configuring ARP Source Suppression
By setting the maximum numbers of ARP packets of different types that can be sent to
the CPU in a unit of time, you can protect the CPU from being attacked by illegal ARP
packets.
Follow these steps to configure ARP source suppression:
To do… Use the command… Remarks
Enter system view
system-view
—
Configure the
maximum number of
ARP packets of a type
that can be sent to the
CPU in a unit of time
arp
source-suppression
limit { total | local |
through } limit-value
Optional
The default value varies with the
type of ARP packets
z When total is adopted, the
default value is 100.
z When local is adopted, the
default value is 3.
z When through is adopted,
the default value is 3.