C613-50631-01 Rev A Command Reference for IE340 Series 865
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IP ADDRESSING AND PROTOCOL COMMANDS
ARP
OPPORTUNISTIC-ND
arp opportunistic-nd
Overview Use this command to enable opportunistic neighbor discovery for the global ARP
cache. This command changes the behavior for unsolicited ARP packet forwarding
on the device.
CAUTION: Opportunistic neighbor discovery can make your device more vulnerable to
ARP/ND cache poisoning attacks. We recommend disabling it unless necessary.
Use the no variant of this command to disable opportunistic neighbor discovery
for the global ARP cache.
Syntax
arp opportunistic-nd
no arp opportunistic-nd
Default Opportunistic neighbor discovery is disabled by default.
Mode Global Configuration
Usage notes When opportunistic neighbor discovery is enabled, the device will reply to any
received unsolicited ARP packets (but not gratuitous ARP packets). The source
MAC address for the unsolicited ARP packet is added to the ARP cache, so the
device forwards the ARP packet. When opportunistic neighbor discovery is
disabled, the source MAC address for the ARP packet is not added to the ARP
cache, so the ARP packet is not forwarded by the device.
Examples To enable opportunistic neighbor discovery for the global ARP cache, enter:
awplus# configure terminal
awplus(config)# arp opportunistic-nd
To disable opportunistic neighbor discovery for the global ARP cache, enter:
awplus# configure terminal
awplus(config)# no arp opportunistic-nd
Related
commands
ipv6 opportunistic-nd
show arp
show running-config interface