< Home

arp-suppress enable

Function

The arp-suppress enable command enables ARP suppression.

The undo arp-suppress command disables ARP suppression.

By default, ARP suppression is disabled and applicable only to VLANIF interfaces.

Format

arp-suppress enable

undo arp-suppress

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

On a special network or in the case of ARP attacks, the system receives multiple ARP packets with the same source IP address at a time. The system needs to update ARP entries repeatedly. To ensure system performance, you can enable ARP suppression. This function enables the system to only respond to ARP Request packets but not update ARP entries when the system receives multiple ARP packets with the same IP address in one second.

If ARP suppression is enabled for all interfaces, ARP entries on some interfaces cannot be updated temporarily. ARP suppression is applicable only to VLANIF and Eth-Trunk interfaces. By default, ARP suppression always takes effect on VLANIF interfaces. It can be configured on other logical interfaces.

After you run the undo arp-suppress command, ARP suppression is enabled only on VLANIF interfaces.

Example

# Enable ARP suppression.

<HUAWEI> system-view
[HUAWEI] arp-suppress enable
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >