Static ARP entries cannot be aged or overwritten by dynamic ARP entries and therefore they enhance communication security.
Static ARP entries prevent malicious modification. They are suitable for small-sized networks and are not suitable for networks where IP addresses of hosts may change.
You can configure static ARP entries manually or using automatic scanning and fixed ARP. Manually configuring static ARP entries is advisable if there are only a few entries. In other cases, use automatic scanning and fixed ARP to configure the static ARP entries.
If a Layer 2 Ethernet interface functions as an outbound interface, you are advised to configure a long static ARP entry. To do so, specify the VLAN and outbound interface when configuring the entry.
When a device is connected to an NLB cluster and multi-interface ARP is used, you can configure only short static ARP entries. For details, see Connecting a Device to an NLB Cluster (Using Multi-Interface ARP).
The system view is displayed.
Manually configure static ARP entries.
By default, no static ARP entry is configured on a device.
Use automatic scanning and fixed ARP to batch configure static ARP entries.
Run the interface interface-type interface-number[.subinterface-number] command to enter the interface view or the sub-interface view.
Only S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S support sub-interface and cevid ce-vid parameters.
Run the display arp static command to verify all static ARP entries.
Run the display arp network net-number [ net-mask | mask-length ] static command to verify static ARP entries based on a network segment.
Run the display arp vpn-instance vpn-instance-name static command to verify static ARP entries based on a VPN instance.