The reset arp dynamic ip vpn-instance command clears dynamic Address Resolution Protocol (ARP) entries containing a specified IP address in a VPN instance.
Parameter | Description | Value |
---|---|---|
ip-address |
Clears dynamic ARP entries containing a specified IP address learned on a specified interface. This parameter can be configured if you only want to delete one of the several ARP entries learned on a specified interface. |
The value is in dotted decimal notation. |
vpn-instance-name |
Clears ARP entries learned in a specified VPN instance. |
The value is a string of 1 to 31 case-sensitive characters, spaces not supported. In addition, the VPN instance name must not be _public_. When double quotation marks are used around the string, spaces are allowed in the string. |
Usage Scenario
If an unauthorized user sends a large number of ARP messages to a device, the device learns a large number of ARP entries in a short period of time, causing a buffer overflow. As a result, users may fail to access the network. To resolve the problem, run the reset arp command to delete invalid ARP entries so that new ARP entries can be created to allow authorized user access.
Prerequisites
ARP entries exist on a device.
The VPN instance specified by vpn-instance vpn-instance-name exists if this parameter is configured.Configuration Impact
After an ARP entry is cleared, the mapping between the IP and MAC addresses in the entry is cleared. As a result, users may fail to access the network, and services may be interrupted.