Predefined user roles
network-admin
Parameters
start-ip-address: Specifies the start IP address of the scanning range.
end-ip-address: Specifies the end IP address of the scanning range. The end IP address must be higher
than or equal to the start IP address.
Usage guidelines
If you specify the start and end IP addresses, the device scans the neighbor IP addresses in the specified
address range to learn ARP entries. If the sending interface has multiple IP addresses falling within the
specified address range, the sender IP address in the sent ARP requests is the interface address on the
smallest network segment.
If you do not specify any address range, the device only scans neighbors on the network where the
primary IP address of the interface resides. The sender IP address in the ARP requests is the primary IP
address of the interface.
The start IP address and end IP address must be on the same network as the primary IP address or
manually configured secondary IP addresses of the interface.
IP addresses already exist in ARP entries are not scanned.
ARP automatic scanning may take some time. To stop an ongoing scan, press Ctrl + C. Dynamic ARP
entries are created based on ARP replies received before the scan is terminated.
Examples
# Configure the device to scan the neighbors on the network where the primary IP address of
VLAN-interface 2 resides.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] arp scan
# Configure the device to scan neighbors on the specified address range.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] arp scan 1.1.1.1 to 1.1.1.20
ARP gateway protection commands
arp filter source
Use arp filter source to enable ARP gateway protection for a specific gateway.
Use undo arp filter source to disable ARP gateway protection for a specific gateway.
Syntax
arp filter source ip-address
304
To Next Page
Loading...
Need help?
General
