How do I configure static ARP binding on an AR

Static ARP entries are manually configured and maintained. They cannot be aged and overridden by dynamic ARP entries. If a static ARP entry is configured on an AR, the AR can communicate with the remote device using only the specified MAC address. Network attackers cannot modify the mapping between the IP and MAC addresses using ARP packets, ensuring communication between the two devices. The methods used to configure static ARP entries are as follows.
- Command lines:
For a Layer 3 physical interface and a Layer 3 Eth-Trunk, run the following command to configure a static ARP entry in which the IP address is 1.1.1.1 and the MAC address is 0000-1111-1111:
[Huawei] arp static 1.1.1.1 0000-1111-1111
For a Dot1q termination sub-interface, run the following command to configure a static ARP entry in which the IP address is 2.1.1.1, MAC address is 0edc-15e5-f7e4, outbound interface is GE1/0/0.1, and VLAN ID is 20:
[Huawei] interface gigabitethernet 1/0/0.1
[Huawei-GigabitEthernet1/0/0.1] control-vid 100 dot1q-termination //You do no run this command in V2R2C01 and later versions.
[Huawei-GigabitEthernet1/0/0.1] dot1q termination vid 20
[Huawei-GigabitEthernet1/0/0.1] ip address 2.1.1.2 24[Huawei-GigabitEthernet1/0/0.1] quit
[Huawei] arp static 2.1.1.1 0edc-15e5-f7e4 vid 20 interface gigabitethernet1/0/0.1
For a QinQ termination sub-interface, run the following command to configure a static ARP entry in which the IP address is 2.1.1.1, MAC address is 0edc-15e5-f7e4, outbound interface is GE1/0/0.1, and VLAN ID is 20:
[Huawei] interface gigabitethernet 1/0/0.1
[Huawei-GigabitEthernet1/0/0.1] control-vid 100 qinq-termination //You do no run this command in V2R2C01 and later versions.
[Huawei-GigabitEthernet1/0/0.1] qinq termination pe-vid 10 ce-vid 20
[Huawei-GigabitEthernet1/0/0.1] ip address 2.1.1.2 24[Huawei-GigabitEthernet1/0/0.1] quit
[Huawei] arp static 2.1.1.1 0edc-15e5-f7e4 vid 10 cevid 20 interface gigabitethernet1/0/0.1

Scroll to top