C613-50631-01 Rev A Command Reference for IE340 Series 866
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IP ADDRESSING AND PROTOCOL COMMANDS
ARP
-LOOSE-CHECK
arp-loose-check
Overview Use this command to let AlliedWare Plus process ARPs that have a sender protocol
address from outside the interface’s local subnets.
Use the no variant of this command to return to the default ARP processing
behavior. By default, AlliedWare Plus will only process ARP packets that are local to
the incoming interface.
Syntax
arp-loose-check
no arp-loose-check
Default Disabled.
Mode Interface Configuration for VLAN interfaces.
Usage notes By default, AlliedWare Plus will only process ARP packets that are local to the
incoming interface, to prevent ARP poisoning. This means the packets must have:
• a sender protocol address inside one of the incoming interface's local
subnets, and
• a target protocol address equal to one of the incoming interface's IP
addresses.
If you enable loose ARP processing and then use the no variant of this command
to return to default processing, you may need to clear the ARP cache. Use the clear
arp-cache command. This will remove any undesired existing ARPs.
You cannot use this command at the same time as Proxy ARP. Proxy ARP also
allows AlliedWare Plus to process ARPs that have a sender protocol address from
outside the interface’s local subnets.
Example To process ARPs that have a sender protocol address from outside vlan2’s local
subnets, use the commands:
awplus# configure terminal
awplus(config)# interface vlan2
awplus(config-if)# arp-loose-check
To return to the default behavior on vlan2, use the commands:
awplus# configure terminal
awplus(config)# interface vlan2
awplus(config-if)# no arp-loose-check
Related
commands
arp
clear arp-cache
ip proxy-arp
show arp