Method used to view the mapping between the IP address and the MAC address on USG firewalls

Method used to view the mapping between the IP address and the MAC address on the USG2000, USG5000, and USG6000:

You can run the display arp command to view the mapping between the IP address and the MAC address.
[USG]display arp
IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-INSTANCE
VLAN/PVC
---------------------------------------------------------------------------
1.1.2.2 3400-a3d8-f023 I Vlanif300
100.1.1.1 3400-a3d8-f023 I Vlanif200
6.6.6.6 3400-a3d8-f023 I Vlanif2
192.168.108.111 3400-a3d8-f01f I GE0/0/0
192.168.108.222 3400-a3d8-f01f I GE0/0/0
192.168.108.100 d46a-b330-c311 6 D GE0/0/0
192.168.108.113 3400-a3da-e1b0 12 D GE0/0/0
192.168.108.115 200b-c73b-6300 16 D GE0/0/0
192.168.108.114 200b-c73b-5b00 16 D GE0/0/0
I indicates the MAC address of the interface. You can learn the local interface address in I, including the VLANIF interface and L3 interface.
D indicates a dynamic entry obtained using the ARP packet. Based on the IP address and MAC address learned by the corresponding interface, you can identify the interface that interworks with a lower-layer device, and determine the MAC address of the device using the IP address.
For example, if the IP address of a computer is available, you can determine the MAC address based on the corresponding MAC option.

Note: You can view only ARP entries learned by a local device. If devices are far apart from each other, the local device does not need to learn the ARP of the device on the lowest level. In such a case, you cannot view the IP address and MAC address on the local device.

Scroll to top