Configuration Guide Configuring ARP
(Optional) It is used to detect IP address conflicts and enables peripheral devices to
update ARP entries.
arp gratuitous-send interval
(Optional) It is used to act as a proxy to reply to ARP requests from the devices in
different subnets.
Enabling ARP
Trustworthiness Detection
(Optional) It is used to unicast ARP request packets to ensure that correct ARP entries
are learned.
arp trusted-monitor enable
Enables ARP trustworthiness detection.
Disabling Dynamic ARP
Learning
(Optional) It is used to disable dynamic ARP learning on an interface.
Disables dynamic ARP learning on an
interface.
2.4.1 Enabling Static ARP
Configuration Effect
Users can manually specify IP-MAC mapping to prevent the device from learning incorrect ARP entries.
Notes
After a static ARP entry is configured, the Layer-3 device learns the physical port corresponding to the MAC address in
the static ARP entry before it performs Layer-3 routing.
Configuration Steps
Configuring Static ARP Entries
Optional.
You can configure a static ARP entry to bind the IP address of the uplink device with its MAC address to prevent
MAC change caused by ARP attacks.
Configure static ARP entries in global configuration mode.
Verification
Run the show running-config command to check whether the configuration takes effect. Or run the show arp static
command to check whether a static ARP cache table is created.
Related Commands
Configuring Static ARP Entries
arp ip-address mac-address type
ip-address: Indicates the IP address mapped to a MAC address, which is in four-part dotted-decimal format.
mac-address: Indicates the DLL address, consisting of 48 bits.