H3C Technologies H3C SecPath F1000-E - Manual (Page 275)

250
CAUTION:
• The vlan-id argument must be the ID of an existing VLAN where the ARP entry resides. The specified
Ethernet interface must belong to that VLAN. The VLAN interface of the VLAN must be created.
• The IP address of the VLAN interface of the VLAN specified by the vlan-id argument must belong to the
same subnet as the IP address specified by the ip-address argument.
Configuring the maximum number of dynamic ARP entries for
an interface
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter Ethernet interface
view. interface interface-type
interface-number
N/A
3. Set the maximum number
of dynamic ARP entries
that the interface can
learn.
arp max-learning-num number
Optional.
By default, a Layer 2 interface does not
limit the number of dynamic ARP entries.
The maximum number of dynamic ARP
entries that a Layer 3 interface can learn
depends on the device model, see
Network Management Command
Reference.
If the value of the number argument is set
to 0, the interface is disabled from
learning dynamic ARP entries.
Setting the aging timer for dynamic ARP entries
Each dynamic ARP entry in the ARP table has a limited lifetime, called aging timer. The aging timer of a
dynamic ARP entry is reset each time the dynamic ARP entry is used. Dynamic ARP entries that are not
used before their aging timers expire are deleted from the ARP table. You can adjust the aging timer for
dynamic ARP entries according to the actual network condition.
To set the aging timer for dynamic ARP entries:
Step Command Remarks
1. Enter system view. system-view N/A
2. Set the aging timer for dynamic ARP entries. arp timer aging aging-time
Optional.
20 minutes by default.
Enabling dynamic ARP entry check
The dynamic ARP entry check function controls whether the firewall supports dynamic ARP entries with
multicast MAC addresses.