Got it

[All About Switches] The IP Address of the Management Interface Cannot Ping the Gateway IP Address

Latest reply: Mar 9, 2018 00:39:02 2719 1 0 0 0

Involved Products and Versions

All products and versions


As shown in Figure 1-1, the management interface Meth is connected to the interface GE0/0/46 on the switch. The uplink interfaces GE0/0/47 and GE0/0/48 on the switch are bound to Eth-Trunk12 and connected to the gateway SwitchA through Eth-Trunk12. The IPSG function is configured on the switch.

Figure 1-1 Networking diagram for the failure to ping the gateway IP address from the IP address of the management interface



Fault Symptom

The IP address of the management interface cannot ping the IP address of the gateway SwitchA.

Troubleshooting Procedure

                          Step 1     Run the display mac-address command on the switch to check the MAC address entries, and then check the IPSG configuration on the switch.

<Switch> display mac-address
MAC Address    VLAN/VSI                          Learned-From        Type      
0024-ac11-2670 2017/-                            Eth-Trunk12         dynamic   
745a-aadf-7f00 2017/-                            GE0/0/46            dynamic   
Total items displayed = 2

user-bind static ip-address mac-address 745a-aadf-7f00 interface GigabitEthernet0/0/46
user-bind static mac-address 0024-ac11-2670 interface Eth-Trunk12
interface MEth0/0/1
 ip address
interface Eth-Trunk12
 port link-type trunk
 port trunk allow-pass vlan 2017
 arp anti-attack check user-bind enable
 ip source check user-bind enable
interface GigabitEthernet0/0/46
 port default vlan 2017
 arp anti-attack check user-bind enable
 ip source check user-bind enable

                          Step 2     The arp anti-attack check user-bind enable command is configured on the switch. If the gateway SwitchA triggers ARP learning first and sends ARP broadcast packets, the ARP broadcast packets can reach the interface GE0/0/46 on the switch. The switch then learns the address from the management interface, and the ping operation is successful. If the switch triggers ARP learning first, the ARP unicast packets sent from the gateway cannot reach the management interface. As a result, ARP entries cannot be learned, and the ping operation fails.

It is recommended that you do not use the management interface of the switch to perform the test but use the device connected to the switch to perform the test. If you need to use the management interface to perform the test, first delete the ARP entries of the switch on the gateway.


  • x
  • convention:

Created Mar 9, 2018 00:39:02

thanks for your sharing!
View more
  • x
  • convention:


You need to log in to comment to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits


Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Please bind your phone number to obtain invitation bonus.
Information Protection Guide
Thanks for using Huawei Enterprise Support Community! We will help you learn how we collect, use, store and share your personal information and the rights you have in accordance with Privacy Policy and User Agreement.