Got it

Users Cannot Access Gateway Problems

826 0 0 0 0

Hello everyone,

Today I will share with you how to deal with users cannot access gateway.

Physical Network Topology


Fault Description

As shown in the figure, two CE12800s are connected to each other. Each device is configured with a VLAN 100, and then VLANIF 100 is configured on VLAN 100. The IP addresses and are configured. The CE12800 is learned. After learning 64K ARP entries, some users cannot ping the gateway.

The server failed to ping the gateway IP address

Configuration Files


vlan batch 100

interface Vlanif100

 ip address


interface 10GE1/0/1

 port default vlan 100

arp static 0efc-0505-86e3 vlan 100 interface 10GE 1/0/2

arp static 0efc-0505-86e4 vlan 100 interface 10GE 1/0/2

arp static 0efc-0505-86e5 vlan 100 interface 10GE 1/0/2

arp static 0efc-0505-86e6 vlan 100 interface 10GE 1/0/2

arp static 0efc-0505-86e7 vlan 100 interface 10GE 1/0/2

arp static 0efc-0505-86e8 vlan 100 interface 10GE 1/0/2

arp static 0efc-0505-86e9 vlan 100 interface 10GE 1/0/2

Troubleshooting Location

Troubleshooting Procedure

Step 1 Check the alarm information on the device and find that the device has insufficient encapsulation table resources. The details are as follows:

[~HUAWEI] display alarm active verbose

Sequence: 329      

AlarmId: 0x95E2029             AlarmName : hwBoardResWarningThresholdExceed                               

AlarmType: quality_of_service    Severity: Warning          State: active

RootKindFlag: Independent          

StartTime   : 2018-02-03 11:56-08:00              

Description : The number of forwarding resources reaches the alarm threshold. (Slot = 1, Threshold = 100, Reason = 174, Description : The number of ARP exceeded the warning threshold.)

The information entry is on the device and the ARP resource forwarding table has been exhausted. As a result, the ARP cannot apply for the ARP forwarding resource entry.

Solution: When the number of users connected to the device is greater than 20000, and the user's MAC address is continuous (for example, when the device is connected to a virtual machine, the MAC address of the virtual machine is continuous), the ARP resource mode is modified from the global mode to the extended mode. The user reuses an IP address, restarts the device, and solves the problem.

Modify the ARP resource mode to extended mode.

<HUAWEI> system-view

[~HUAWEI] arpresource-mode extend

After the mode is modified, restart the device to ping the gateway device. The information is as follows:

Pinging with 32 bytes of data:

Response from Bytes = 32 Time = 1ms TTL = 254

Response from Bytes = 32 Time = 1ms TTL = 254

Response from Bytes = 32 Time = 1ms TTL = 254

Response from Bytes = 32 Time = 1ms TTL = 254

Ping statistics for

     Packet: Sent = 4, Received = 4, Lost = 0 (0% lost),

Estimated round trip time in milliseconds:

     Shortest = 48ms, longest = 49ms, average = 48ms

Root Cause

When there are excessive ARP entries on the device, the insufficient resources used by ARP will fail to apply, causing customers to access the gateway normally.

That is all I want to share with you! Thank you!

  • x
  • convention:


You need to log in to comment to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits


Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Please bind your phone number to obtain invitation bonus.