beautypg.com

Brocade Multi-Service IronWare Switching Configuration Guide (Supporting R05.6.00) User Manual

Page 788

background image

758

Multi-Service IronWare Switching Configuration Guide

53-1003036-02

Dynamic ARP inspection

19

The ethernet slot/port command specifies the port number attached to the device that has the
MAC address of the entry. (The ethernet keyword is repeated before each individual port or range of
ports to be included in the multi-port ARP entry.)

VRF Considerations
The configuration command above creates a static ARP entry associated with the default VRF. To
configure the multi-port ARP for a non-default VRF, first enter the configuration mode for the
non-default VRF, then enter address family command mode using commands such as the
following.

Brocade(config)# vrf test

Brocade(config-vrf-test)# address-family ipv4

Brocade(config-vrf-test-ipv4)# arp 10.6.6.7 0001.0001.0001 multi-ports ethernet

2/1 to 2/7

Brocade(config-vrf-test-ipv4)# ethernet 3/2 to 3/2

Brocade(config-vrf-test-ipv4)# exit-address-family

Brocade(config-vrf-test)# exit vrf

The above commands create a multi-port ARP entry associated with a non-default VRF called
“test.”

NOTE

This feature is supported on both the Brocade NetIron XMR, Brocade MLX series and Brocade
NetIron CER, Brocade NetIron CES series platforms.

Instantiation in the ARP table

NOTE

Configuring a multi-port static ARP entry does not automatically create a dynamic ARP entry!

NOTE

The multi-port ARP feature can be used in a pure Layer 3 forwarding environment to forward IPv4
traffic to multiple ports and should not be used in conjunction with Multi-port static MAC.

The following four conditions must be met in order for a user-created multi-port static ARP entry to
be instantiated in the dynamic ARP table:

1. All the ports configured in the multi-port static ARP entry need to belong to the same VE.

2. The IP address of the multi-port static ARP entry needs to match the subnet of the VEto

which the ports belong, and it must be in the same VRF.

3. At least one of the ports in the configured port list needs to be up.

4. MPLS uplink must not be configured on the VE that subnets the static ARP IP address.

If these four conditions are met, a conflict check is performed before adding the static ARP entry to
the dynamic ARP table. If a dynamic entry already exists with the same IP address and VRF, the
static ARP will override the dynamic entry and packets will be forwarded to the FID for this dynamic
ARP entry.

Changes in these conditions (VE port membership changes, port up/down status changes, etc.)
can trigger reevaluation of the static ARP and may result in the entry being added to or removed
from the ARP table.