HPE FlexNetwork MSR Router Series

Transcription

1 HPE FlexNetwork MSR Router Series Comware 5 Layer 3 - IP Services Command Reference Part number: Software version: CMW710-R2516 Document version: 6W

2 Copyright 2016 Hewlett Packard Enterprise Development LP The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or copying. Consistent with FAR and , Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor s standard commercial license. Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise website. Acknowledgments Intel, Itanium, Pentium, Intel Inside, and the Intel Inside logo are trademarks of Intel Corporation in the United States and other countries. Microsoft and Windows are trademarks of the Microsoft group of companies. Adobe and Acrobat are trademarks of Adobe Systems Incorporated. Java and Oracle are registered trademarks of Oracle and/or its affiliates. UNIX is a registered trademark of The Open Group. i

3 Contents ARP configuration commands 1 arp check enable 1 arp max-learning-num 1 arp static 2 arp timer aging 3 display arp 3 display arp ip-address 5 display arp timer aging 6 display arp vpn-instance 6 naturemask-arp enable 7 reset arp 7 Gratuitous ARP configuration commands 9 arp send-gratuitous-arp 9 gratuitous-arp-learning enable 9 gratuitous-arp-sending enable 10 Proxy ARP configuration commands 11 display local-proxy-arp 11 display proxy-arp 11 local-proxy-arp enable 12 proxy-arp enable 13 ARP snooping configuration commands 14 arp-snooping enable 14 display arp-snooping 14 reset arp-snooping 15 DHCP server configuration commands 16 bims-server 16 bootfile-name 16 dhcp enable (for DHCP server) 17 dhcp server apply ip-pool 18 dhcp select server global-pool 18 dhcp server client-detect enable 19 dhcp server detect 20 dhcp server forbidden-ip 20 dhcp server ip-pool 21 dhcp server ping packets 22 dhcp server ping timeout 23 dhcp server relay information enable 23 dhcp server threshold 24 dhcp update arp (for DHCP server) 25 display dhcp server conflict 25 display dhcp server expired 26 display dhcp server free-ip 27 display dhcp server forbidden-ip 27 display dhcp server ip-in-use 28 display dhcp server statistics 30 display dhcp server tree 31 dns-list 33 domain-name 34 expired 34 forbidden-ip 35 gateway-list 36 nbns-list 37 netbios-type 37 ii

4 network 38 network ip range 39 network mask 40 next-server 41 option 41 reset dhcp server conflict 42 reset dhcp server ip-in-use 42 reset dhcp server statistics 43 static-bind client-identifier 43 static-bind ip-address 44 static-bind mac-address 45 tftp-server domain-name 46 tftp-server ip-address 47 vendor-class-identifier 47 voice-config 48 DHCP relay agent configuration commands 50 dhcp enable (for DHCP relay agent) 50 dhcp relay address-check enable 50 dhcp relay check mac-address 51 dhcp relay client-detect enable 52 dhcp relay information circuit-id format-type 52 dhcp relay information circuit-id string 53 dhcp relay information enable 54 dhcp relay information format 54 dhcp relay information remote-id format-type 55 dhcp relay information remote-id string 56 dhcp relay information strategy 56 dhcp relay release ip 57 dhcp relay security static 58 dhcp relay security refresh enable 58 dhcp relay security tracker 59 dhcp relay server-detect 60 dhcp relay server-group 60 dhcp relay server-select 61 dhcp select relay 62 dhcp update arp (for DHCP relay agent) 62 display dhcp relay 63 display dhcp relay information 64 display dhcp relay security 65 display dhcp relay security statistics 66 display dhcp relay security tracker 67 display dhcp relay server-group 67 display dhcp relay statistics 68 reset dhcp relay statistics 70 DHCP client configuration commands 71 display dhcp client 71 ip address dhcp-alloc 73 DHCP snooping configuration commands 74 dhcp-snooping 74 dhcp-snooping binding database filename 74 dhcp-snooping binding database update interval 75 dhcp-snooping binding database update now 76 dhcp-snooping check mac-address 76 dhcp-snooping check request-message 77 dhcp-snooping information circuit-id format-type 78 dhcp-snooping information circuit-id string 79 dhcp-snooping information enable 80 dhcp-snooping information format 81 dhcp-snooping information remote-id format-type 82 iii

5 dhcp-snooping information remote-id string 83 dhcp-snooping information strategy 85 dhcp-snooping information sub-option 86 dhcp-snooping trust 87 display dhcp-snooping 88 display dhcp-snooping binding database 89 display dhcp-snooping information 90 display dhcp-snooping packet statistics 91 display dhcp-snooping trust 92 reset dhcp-snooping 93 reset dhcp-snooping packet statistics 93 BOOTP client configuration commands 95 display bootp client 95 ip address bootp-alloc 96 IPv4 DNS configuration commands 97 display dns domain 97 display dns host 98 display dns server 99 display ip host 100 dns domain 101 dns proxy enable 101 dns resolve 102 dns server 102 dns source-interface 103 dns spoofing 104 ip host 104 reset dns host 105 DDNS configuration commands 107 ddns apply policy 107 ddns policy 107 display ddns policy 108 interval 109 password 110 ssl client policy 111 url 111 username 113 IP addressing configuration commands 115 display fast-provisioning interface 115 display ip interface 115 display ip interface brief 118 fast-provisioning enable 120 fast-provisioning now 120 fast-provisioning restart 120 fast-provisioning stop 121 ip address 121 ip address unnumbered 122 Fast forwarding configuration commands 124 display ip fast-forwarding cache 124 ip fast-forwarding 125 reset ip fast-forwarding cache 126 IP performance optimization commands 127 display icmp statistics 127 display ip socket 128 display ip statistics 131 display ip virtual-reassembly 133 display tcp statistics 134 iv

6 display udp statistics 136 ip forward-broadcast (interface view) 138 ip icmp-extensions 138 ip redirects enable 139 ip ttl-expires enable 139 ip unreachables enable 140 ip virtual-reassembly 140 reset ip statistics 141 reset tcp statistics 141 reset udp statistics 142 tcp mss 142 tcp path-mtu-discovery 143 tcp timer fin-timeout 143 tcp timer syn-timeout 144 tcp window 144 NAT configuration commands 146 address 146 display nat address-group 146 display nat aging-time 147 display nat all 148 display nat bound 151 display nat dns-map 152 display nat log 153 display nat server 154 display nat session 155 display nat static 156 display nat statistics 158 display userlog export 159 nat address-group 160 nat aging-time 161 nat alg 162 nat dns-map 163 nat link-down reset-session enable 164 nat log enable 165 nat log flow-active 165 nat log flow-begin 166 nat mapping-behavior 166 nat outbound 167 nat outbound static 169 nat server (for normal NAT server) 170 nat static 173 nat static net-to-net 174 port-range 174 reset nat session 175 reset userlog nat export 175 reset userlog nat logbuffer 176 userlog nat export host 176 userlog nat export source-ip 177 userlog nat export version 178 userlog nat syslog 178 NAT-PT configuration commands 180 display natpt address-group 180 display natpt address-mapping 180 display natpt aging-time 181 display natpt all 182 display natpt frag-sessions 184 display natpt session 185 display natpt statistics 186 natpt address-group 187 natpt aging-time 188 v

7 natpt enable 189 natpt max-session 189 natpt prefix 190 natpt turn-off tos 190 natpt turn-off traffic-class 191 natpt v4bound dynamic 191 natpt v4bound static 192 natpt v4bound static v6server 193 natpt v6bound dynamic 193 natpt v6bound static 194 reset natpt dynamic-mappings 195 reset natpt statistics 195 DVPN configuration commands 196 VAM server configuration commands 196 authentication-algorithm 196 authentication-method 196 display vam server address-map 197 display vam server statistic 198 encryption-algorithm 200 hub private-ip 201 keepalive interval 202 keepalive retry 202 pre-shared-key (VPN domain view) 203 server enable 204 vam server enable 205 vam server ip-address 205 vam server vpn 206 VAM client configuration commands 207 client enable 207 display vam client 207 pre-shared-key (VAM client view) 209 resend interval 210 server primary 211 server secondary 211 user 212 vam client enable 213 vam client name 214 vpn 214 DVPN tunnel configuration commands 215 display dvpn session 215 dvpn session dumb-time 216 dvpn session idle-time 217 keepalive 218 reset dvpn session 219 tunnel vpn-instance 219 vam client 220 Tunneling configuration commands 222 bandwidth 222 default 222 description 223 destination 223 display interface tunnel 224 display ipv6 interface tunnel 228 interface tunnel 232 mtu 233 reset counters interface 233 shutdown 234 source 235 tunnel bandwidth 236 tunnel discard ipv4-compatible-packet 236 vi

8 tunnel-protocol 237 UDP helper configuration commands 239 display udp-helper server 239 reset udp-helper packet 239 udp-helper enable 240 udp-helper multicast-map 240 udp-helper port 241 udp-helper server 242 GRE configuration commands 243 gre checksum 243 gre key 243 gre recursion 244 keepalive 245 IPv6 basics configuration commands 247 display ipv6 fib 247 display ipv6 fib ipv6-address 248 display ipv6 interface 249 display ipv6 neighbors 253 display ipv6 neighbors count 254 display ipv6 neighbors vpn-instance 255 display ipv6 pathmtu 256 display ipv6 socket 257 display ipv6 statistics 259 display tcp ipv6 statistics 262 display tcp ipv6 status 265 display udp ipv6 statistics 266 ipv6 267 ipv6 address 267 ipv6 address anycast 268 ipv6 address auto 269 ipv6 address auto link-local 269 ipv6 address eui ipv6 address link-local 271 ipv6 fib-loadbalance-type hash-based 271 ipv6 hoplimit-expires enable 272 ipv6 icmp-error 272 ipv6 icmpv6 multicast-echo-reply enable 273 ipv6 mtu 273 ipv6 nd autoconfig managed-address-flag 274 ipv6 nd autoconfig other-flag 274 ipv6 nd dad attempts 275 ipv6 nd hop-limit 275 ipv6 nd ns retrans-timer 276 ipv6 nd nud reachable-time 277 ipv6 nd ra halt 277 ipv6 nd ra interval 278 ipv6 nd ra no-advlinkmtu 278 ipv6 nd ra prefix 279 ipv6 nd ra router-lifetime 280 ipv6 neighbor 280 ipv6 neighbor stale-aging 281 ipv6 neighbors max-learning-num 282 ipv6 pathmtu 282 ipv6 pathmtu age 283 ipv6 redirects enable 283 ipv6 unreachables enable 284 local-proxy-nd enable 284 reset ipv6 neighbors 285 reset ipv6 pathmtu 285 vii

9 reset ipv6 statistics 286 reset tcp ipv6 statistics 286 reset udp ipv6 statistics 287 tcp ipv6 timer fin-timeout 287 tcp ipv6 timer syn-timeout 288 tcp ipv6 window 288 DHCPv6 configuration commands 289 DHCPv6 common configuration commands 289 display ipv6 dhcp duid 289 DHCPv6 server configuration commands 289 display ipv6 dhcp pool 289 display ipv6 dhcp prefix-pool 291 display ipv6 dhcp server 292 display ipv6 dhcp server conflict 293 display ipv6 dhcp server expired 294 display ipv6 dhcp server ip-in-use 295 display ipv6 dhcp server pd-in-use 297 display ipv6 dhcp server statistics 299 dns-server 300 domain-name 301 ds-lite address 301 network 302 ipv6 dhcp pool 303 ipv6 dhcp prefix-pool 304 ipv6 dhcp server 304 ipv6 dhcp server enable 305 prefix-pool 306 reset ipv6 dhcp server conflict 307 reset ipv6 dhcp server ip-in-use 307 reset ipv6 dhcp server pd-in-use 308 reset ipv6 dhcp server statistics 309 sip-server 309 static-bind address 310 static-bind prefix 311 DHCPv6 relay agent configuration commands 312 display ipv6 dhcp relay server-address 312 display ipv6 dhcp relay statistics 313 ipv6 dhcp relay server-address 314 reset ipv6 dhcp relay statistics 315 DHCPv6 client configuration commands 316 display ipv6 dhcp client 316 display ipv6 dhcp client statistics 317 reset ipv6 dhcp client statistics 318 IPv6 fast forwarding configuration commands 320 display ipv6 fast-forwarding cache 320 ipv6 fast-forwarding 322 reset ipv6 fast-forwarding cache 323 IPv6 DNS configuration commands 324 display dns ipv6 server 324 display ipv6 host 325 dns server ipv6 325 ipv6 host 326 IP forwarding basics commands 328 display fib 328 display fib ip-address 330 Load sharing commands 332 bandwidth-based-sharing 332 viii

10 display load-sharing ip address 332 ip user-based-sharing enable (system view) 333 ip user-based-sharing enable (interface view) 334 load-bandwidth 334 reset load-sharing statistics 335 NEMO commands 336 address 336 display ip mobile router registration 336 forwarding-filter enable 337 home-agent 338 ip mobile router 338 ip mobile router-service roam 339 ip mobile router-service collocated gateway 339 ip mobile router-service collocated registration retry 340 ip mobile secure home-agent 341 ip-df zero 341 ipsec policy 342 interop register extend expire 343 register lifetime 344 register retransmit 344 router mobile 345 tcp mss 346 tunnel mtu 346 mobile-network 347 Document conventions and icons 348 Conventions 348 Network topology icons 349 Support and other resources 350 Accessing Hewlett Packard Enterprise Support 350 Accessing updates 350 Websites 351 Customer self repair 351 Remote support 351 Documentation feedback 351 Index 353 ix

11 ARP configuration commands arp check enable Use arp check enable to enable dynamic ARP entry check. Use undo arp check enable to disable dynamic ARP entry check. arp check enable undo arp check enable Dynamic ARP entry check is enabled. System view # Enable dynamic ARP entry check. [Sysname] arp check enable arp max-learning-num Use arp max-learning-num to configure the maximum number of dynamic ARP entries that an interface can learn. Use undo arp max-learning-num to restore the default. arp max-learning-num number undo arp max-learning-num A Layer 2 interface does not limit the number of dynamic ARP entries. A Layer 3 interface can learn a maximum of 1024 dynamic ARP entries. Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, VLAN interface view, Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view number: Maximum number of dynamic ARP entries that an interface can learn. The value range is 0 to

12 arp static When the number argument is set to 0, the interface is disabled from learning dynamic ARP entries. # Specify VLAN-interface 40 to learn up to 500 dynamic ARP entries. [Sysname] interface vlan-interface 40 [Sysname-Vlan-interface40] arp max-learning-num 500 # Specify Ethernet 1/1 to learn up to 1000 dynamic ARP entries. [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] arp max-learning-num 1000 # Specify Layer 2 aggregate interface bridge-aggregation 1 to learn up to 1000 dynamic ARP entries. [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] arp max-learning-num 1000 # Specify Layer 3 aggregate interface route-aggregation 1 to learn up to 1000 dynamic ARP entries. [Sysname] interface route-aggregation 1 [Sysname-Route-Aggregation1] arp max-learning-num 1000 Use arp static to configure a static ARP entry. Use undo arp to remove an ARP entry. arp static ip-address mac-address [ vlan-id interface-type interface-number ] [ vpn-instance vpn-instance-name ] undo arp ip-address [ vpn-instance-name ] System view ip-address: IP address in an ARP entry. mac-address: MAC address in an ARP entry, in the format H-H-H. vlan-id: ID of a VLAN to which a static ARP entry belongs, in the range of 1 to interface-type interface-number: Interface type and interface number. vpn-instance vpn-instance-name: Specifies the MPLS L3VPN for a static ARP entry. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Without this option, the static ARP entry belongs to the public network. A static ARP entry is effective when the device works correctly. However, when the VLAN or VLAN interface to which an ARP entry corresponds is deleted, the entry, if long, is deleted, and if short and resolved, becomes unresolved. 2

13 The vlan-id argument specifies the VLAN corresponding to an ARP entry and must be the ID of an existing VLAN. In addition, the Ethernet interface following the argument must belong to that VLAN. The VLAN interface of the VLAN must have been created. If you specify both the vlan-id and ip-address arguments, the IP address of the VLAN interface corresponding to the vlan-id argument must be in the same network segment as the IP address specified by the ip-address argument. # Configure a static ARP entry, with IP address , MAC address 00e0-fc and outbound interface Ethernet 1/1 of VLAN 10. [Sysname] arp static e0-fc ethernet 1/1 Related commands reset arp display arp arp timer aging Use arp timer aging to set the aging timer for dynamic ARP entries. Use undo arp timer aging to restore the default. arp timer aging aging-time undo arp timer aging The aging timer for dynamic ARP entries is 20 minutes. System view aging-time: Aging time for dynamic ARP entries in minutes, in the range of 1 to # Set aging timer for dynamic ARP entries to 10 minutes. [Sysname] arp timer aging 10 Related commands display arp timer aging display arp Use display arp to display ARP entries. display arp [ [ all dynamic static ] vlan vlan-id interface interface-type interface-number ] [ count verbose ] [ { begin exclude include } regular-expression ] 3

14 Any view 1: Monitor level all: Displays all ARP entries. dynamic: Displays dynamic ARP entries. static: Displays static ARP entries. vlan vlan-id: Displays the ARP entries of the specified VLAN. The VLAN ID is in the range of 1 to interface interface-type interface-number: Displays the ARP entries of the interface specified by the argument interface-type interface-number. count: Displays the number of ARP entries. verbose: Displays detailed information about ARP entries. : Filters command output by specifying a regular expression. For more information about regular expressions, see HPE FlexNetwork MSR Router Series Comware 5 Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. If you do not specify any parameter, this command displays all ARP entries. # Display detailed information about all ARP entries. <Sysname> display arp all verbose Type: S-Static D-Dynamic A-Authorized IP Address MAC Address VLAN ID Interface Aging Type Vpn-instance Name e0-fc N/A N/A N/A S test e0-fe GE1/1 14 D [No Vrf] d-88f7-9f7d 1 GE1/2 18 D [No Vrf] a GE1/3 20 D [No Vrf] e0-fc N/A N/A N/A M [No Vrf] Table 1 Command output Field IP Address Description IP address in an ARP entry. 4

15 Field MAC Address VLAN ID Interface Aging Type Vpn-instance Name Description MAC address in an ARP entry. ID of the VLAN to which the ARP entry belongs. Outbound interface in an ARP entry. Aging time for a dynamic ARP entry in minutes (N/A means unknown aging time or no aging time). ARP entry type: D Dynamic. S Static. A Authorized. Name of VPN instance. [No Vrf] indicates that no VPN instance is configured for the corresponding ARP entry. # Display the number of all ARP entries. <Sysname> display arp all count Total Entry(ies): 5 Related commands arp static reset arp display arp ip-address Use display arp ip-address to display the ARP entry for a specific IP address. display arp ip-address [ verbose ] [ { begin exclude include } regular-expression ] Any view 1: Monitor level ip-address: Displays the ARP entry for the specified IP address. verbose: Displays the detailed information about the specified ARP entry. : Filters command output by specifying a regular expression. For more information about regular expressions, see HPE FlexNetwork MSR Router Series Comware 5 Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. # Display the corresponding ARP entry for the IP address <Sysname> display arp Type: S-Static D-Dynamic A-Authorized 5

16 IP Address MAC Address VLAN ID Interface Aging Type e0-fc N/A N/A N/A S Related commands arp static reset arp display arp timer aging Use display arp timer aging to display the aging timer for dynamic ARP entries. display arp timer aging [ { begin exclude include } regular-expression ] Any view : Filters command output by specifying a regular expression. For more information about regular expressions, see HPE FlexNetwork MSR Router Series Comware 5 Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. # Display the aging timer for dynamic ARP entries. <Sysname> display arp timer aging Current ARP aging time is 10 minute(s) Related commands arp timer aging display arp vpn-instance Use display arp vpn-instance to display the ARP entries for a specific VPN. display arp vpn-instance vpn-instance-name [ count ] [ { begin exclude include } regular-expression ] Any view 1: Monitor level 6

17 vpn-instance-name: Specifies the name of a MPLS L3VPN, a case-sensitive string of 1 to 31 characters. count: Displays the number of ARP entries. : Filters command output by specifying a regular expression. For more information about regular expressions, see HPE FlexNetwork MSR Router Series Comware 5 Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. # Display ARP entries for the VPN instance named test. <Sysname> display arp vpn-instance test Type: S-Static D-Dynamic IP Address MAC Address VLAN ID Interface Aging Type e0-fc N/A N/A N/A S Related commands arp static reset arp naturemask-arp enable Use naturemask-arp enable to enable natural mask support for ARP requests. Use undo naturemask-arp enable to restore the default. naturemask-arp enable undo naturemask-arp enable Natural mask support for ARP requests is disabled. System view # Enable natural mask support for ARP requests. [Sysname] naturemask-arp enable reset arp Use reset arp to clear ARP entries except authorized ARP entries from the ARP table. 7

18 reset arp { all dynamic static interface interface-type interface-number } User view all: Clears all ARP entries except authorized ARP entries. dynamic: Clears all dynamic ARP entries. static: Clears all static ARP entries. interface interface-type interface-number: Clears the ARP entries for the interface specified by the argument interface-type interface-number. The command clears only the dynamic ARP entries of the interface specified by the interface interface-type interface-number option. # Clear all static ARP entries. <Sysname> reset arp static Related commands arp static display arp 8

19 Gratuitous ARP configuration commands arp send-gratuitous-arp Use arp send-gratuitous-arp to enable periodic sending of gratuitous ARP packets and set the sending interval on an interface. Use undo arp send-gratuitous-arp to disable the interface from periodically sending gratuitous ARP packets. arp send-gratuitous-arp [ interval milliseconds ] undo arp send-gratuitous-arp An interface is disabled from sending gratuitous ARP packets periodically. Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view, VLAN interface view interval milliseconds: Sets the interval at which gratuitous ARP packets are sent, in the range of 200 to milliseconds. The default value is This function takes effect only when the enabled interface is up and an IP address has been assigned to the interface. This function can send gratuitous ARP requests only for a VRRP virtual IP address, or the sending interface's primary IP address or manually configured secondary IP address. The primary IP address can be configured manually or automatically, whereas the secondary IP address must be configured manually. If you change the interval for sending gratuitous ARP packets, the configuration is effective at the next sending interval. The frequency of sending gratuitous ARP packets might be much lower than is expected if this function is enabled on multiple interfaces, or each interface is configured with multiple secondary IP addresses, or a small sending interval is configured in the preceding cases. # Enable Ethernet 1/1 to send gratuitous ARP packets every 300 milliseconds. [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] arp send-gratuitous-arp interval 300 gratuitous-arp-learning enable Use gratuitous-arp-learning enable to enable the gratuitous ARP packet learning function. Use undo gratuitous-arp-learning enable to disable the function. 9

20 gratuitous-arp-learning enable undo gratuitous-arp-learning enable The function is enabled. System view With this function enabled, a device creates a dynamic ARP entry by using the sender IP and MAC addresses in a received gratuitous ARP packet if no matching ARP entry exists. If a matching ARP entry exists, the device updates the ARP entry regardless of whether this function is enabled. # Enable the gratuitous ARP packet learning function. [Sysname] gratuitous-arp-learning enable gratuitous-arp-sending enable Use gratuitous-arp-sending enable to enable sending gratuitous ARP packets upon receiving ARP requests whose target IP address is on a different subnet. Use undo gratuitous-arp-sending enable to restore the default. gratuitous-arp-sending enable undo gratuitous-arp-sending enable A device does not send gratuitous ARP packets upon receiving ARP requests whose target IP address is on a different subnet. System view # Disable a device from sending gratuitous ARP packets upon receiving ARP requests whose target IP address is on a different subnet. [Sysname] undo gratuitous-arp-sending enable 10

21 Proxy ARP configuration commands display local-proxy-arp Use display local-proxy-arp to display the status of the local proxy ARP. display local-proxy-arp [ interface interface-type interface-number ] [ { begin exclude include } regular-expression ] Any view interface interface-type interface-number: Displays the local proxy ARP status of the interface specified by the argument interface-type interface-number. : Filters command output by specifying a regular expression. For more information about regular expressions, see HPE FlexNetwork MSR Router Series Comware 5 Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. If you specify an interface, this command displays the local proxy ARP status for the specified interface. If you do not specify any interface, this command displays the local proxy ARP status for all interfaces. # Display the status of the local proxy ARP on VLAN-interface 2. <Sysname> display local-proxy-arp interface vlan-interface 2 Interface Vlan-interface2 Local Proxy ARP status: enabled Related commands local-proxy-arp enable display proxy-arp Use display proxy-arp to display the proxy ARP status. display proxy-arp [ interface interface-type interface-number ] [ { begin exclude include } regular-expression ] Any view 11

22 interface interface-type interface-number: Displays the proxy ARP status of the interface specified by the argument interface-type interface-number. : Filters command output by specifying a regular expression. For more information about regular expressions, see HPE FlexNetwork MSR Router Series Comware 5 Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. If you specify an interface, this command displays proxy ARP status of the specified interface. If you do not specify any interface, this command displays proxy ARP status of all interfaces. # Display the proxy ARP status on Ethernet 1/1. <Sysname> display proxy-arp interface ethernet 1/1 Interface Ethernet 1/1 Proxy ARP status: disabled Related commands proxy-arp enable local-proxy-arp enable Use local-proxy-arp enable to enable local proxy ARP. Use undo local-proxy-arp enable to disable local proxy ARP. local-proxy-arp enable [ ip-range startip to endip ] undo local-proxy-arp enable Local proxy ARP is disabled. VLAN interface view, Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view ip-range startip to endip: Specifies the IP address range for which local proxy ARP is enabled. The start IP address must be lower than or equal to the end IP address. Only one IP address range can be specified by using the ip-range keyword on an interface. 12

23 # Enable local proxy ARP on Ethernet 1/1. [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] local-proxy-arp enable # Enable local proxy ARP on Ethernet 1/1 for a specific IP address range. [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] local-proxy-arp enable ip-range to Related commands display local-proxy-arp proxy-arp enable Use proxy-arp enable to enable proxy ARP. Use undo proxy-arp enable to disable proxy ARP. proxy-arp enable undo proxy-arp enable Proxy ARP is disabled. VLAN interface view, Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view # Enable proxy ARP on Ethernet 1/1. [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] proxy-arp enable Related commands display proxy-arp 13

24 ARP snooping configuration commands arp-snooping enable Use arp-snooping enable to enable ARP snooping. Use undo arp-snooping enable to disable ARP snooping. arp-snooping enable undo arp-snooping enable ARP snooping is disabled. VLAN view # Enable ARP snooping on VLAN 1. [Sysname] vlan 1 [Sysname-vlan1] arp-snooping enable display arp-snooping Use display arp-snooping to display ARP snooping entries. If you do not specify any parameters, the command displays all ARP snooping entries. display arp-snooping [ ip ip-address vlan vlan-id ] [ { begin exclude include } regular-expression ] Any view ip ip-address: Displays ARP snooping entry information about the IP address. vlan vlan-id: Displays ARP snooping entries for a specific VLAN. The value range for the vlan-id argument is 1 to : Filters command output by specifying a regular expression. For more information about regular expressions, see HPE FlexNetwork MSR Router Series Comware 5 Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. 14

25 include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. # Display ARP snooping entries for VLAN 1. <Sysname> display arp-snooping vlan 1 IP Address MAC Address VLAN ID Interface Aging Status Eth1/1 20 Valid Eth1/2 5 Invalid ---- Total entry(ies) on VLAN 1: reset arp-snooping Use reset arp-snooping to remove ARP snooping entries. If you do not specify any parameters, the command removes all ARP snooping entries. reset arp-snooping [ ip ip-address vlan vlan-id ] User view ip ip-address: Removes the ARP entry for a specific IP address. vlan vlan-id: Removes the ARP entries for a specific VLAN. The value range for the vlan-id argument is 1 to # Remove ARP snooping entries for VLAN 1. <Sysname> reset arp-snooping vlan 1 15

26 DHCP server configuration commands bims-server Use bims-server to specify the IP address, port number, and shared key of the BIMS server in a DHCP address pool. Use undo bims-server to remove the specified BIMS server information. bims-server ip ip-address [ port port-number ] sharekey [ cipher simple ] key undo bims-server No BIMS server information is specified. DHCP address pool view ip ip-address: Specifies the IP address of the BIMS server. port port-number: Specifies the port number of the BIMS server, in the range of 1 to cipher: Sets a ciphertext key. simple: Sets a plaintext key. key: Specifies the key string. This argument is case sensitive. If simple is specified, it must be a string of 1 to 16 characters. If cipher is specified, it must be a ciphertext string of 1 to 53 characters. If neither cipher nor simple is specified, you set a plaintext key string. If you use this command multiple times, the most recent configuration takes effect. For security purposes, all passwords, including passwords configured in plain text, are saved in cipher text to the configuration file. # Specify the IP address , port number 80, and shared key aabbcc of the BIMS server in DHCP address pool 0 for the client. [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] bims-server ip port 80 sharekey simple aabbcc Related commands dhcp server ip-pool display dhcp server tree bootfile-name Use bootfile-name to specify a bootfile name in a DHCP address pool. 16

27 Use undo bootfile-name to remove the specified bootfile name. bootfile-name bootfile-name undo bootfile-name No bootfile name is specified. DHCP address pool view bootfile-name: Boot file name, a string of 1 to 63 characters. If you execute the bootfile-name command multiple times, the most recent configuration takes effect. # Specify the bootfile name aaa.cfg in DHCP address pool 0. [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] bootfile-name aaa.cfg Related commands dhcp server ip-pool display dhcp server tree dhcp enable (for DHCP server) Use dhcp enable to enable DHCP. Use undo dhcp enable to disable DHCP. dhcp enable undo dhcp enable DHCP is disabled. System view Enable DHCP before performing DHCP server or relay agent configurations. 17

28 # Enable DHCP. [Sysname] dhcp enable dhcp server apply ip-pool Use dhcp server apply ip-pool to apply an address pool on an interface. Use undo dhcp server apply ip-pool to remove the configuration. dhcp server apply ip-pool pool-name undo dhcp server apply ip-pool [ pool-name ] No extended address pool is applied on an interface, and the server assigns an IP address from a common address pool to a client when the client's request arrives at the interface. Interface view pool-name: Specifies the name of a DHCP address pool, a case-insensitive string of 1 to 35 characters. If you execute the dhcp server apply ip-pool command on an interface, when a client's request arrives at the interface, the server attempts to assign the client the statically bound IP address first, and then an IP address from this extended address pool. Only an extended address pool can be applied on an interface. The address pool to be referenced must already exist. # Apply extended DHCP address pool 0 on Ethernet 1/1. [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] dhcp server apply ip-pool 0 Related commands dhcp server ip-pool dhcp select server global-pool Use dhcp select server global-pool to enable the DHCP server on an interface. After the interface receives a DHCP request from a client, the DHCP server allocates an IP address from the address pool. Use undo dhcp select server global-pool to remove the configuration. Upon receiving a DHCP request from a client, the interface neither assigns an IP address to the client, nor serves as a DHCP relay agent to forward the request. 18

29 dhcp select server global-pool [ subaddress ] undo dhcp select server global-pool [ subaddress ] The DHCP server is enabled on an interface when DHCP is enabled. Interface view subaddress: Supports secondary address allocation. When the DHCP server and client are on the same network segment, the server preferably assigns an IP address from an address pool that resides on the same subnet as the primary IP address of the server interface (connecting to the client). If the address pool contains no assignable IP address, the server assigns an IP address from an address pool that resides on the same subnet as the secondary IP addresses of the server interface. If the interface has multiple secondary IP addresses, each address pool is tried in turn for address allocation. Use the undo dhcp select server global-pool subaddress command to disable the support for secondary address allocation. If you do not specify the subaddress keyword, the DHCP server can only assign an IP address from the address pool that resides on the same subnet as the primary IP address of the server interface. # Enable the DHCP server on Ethernet 1/1 to assign IP addresses from the address pool that resides on the same subnet as the primary IP address of the server interface (connecting to the client) for the client. [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] dhcp select server global-pool dhcp server client-detect enable Use dhcp server client-detect enable to enable client offline detection on the DHCP server. Use undo dhcp server client-detect enable to disable the function. dhcp server client-detect enable undo dhcp server client-detect enable The function is disabled. Interface view 19

30 With this feature enabled, the DHCP server considers that a DHCP client goes offline when the ARP entry for the client ages out. In addition, it removes the client entry and releases the IP address of the client. # Enable client offline detection on the DHCP server. [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] dhcp server client-detect enable dhcp server detect Use dhcp server detect to enable unauthorized DHCP server detection. Use undo dhcp server detect to disable the function. dhcp server detect undo dhcp server detect The function is disabled. System view With this function enabled, upon receiving a DHCP request, the DHCP server records the IP addresses of DHCP servers that offered IP addresses to the DHCP client and the receiving interface. Each detected server is recorded only once. The administrator can use this information to check for unauthorized DHCP servers. # Enable unauthorized DHCP server detection. [Sysname] dhcp server detect dhcp server forbidden-ip Use dhcp server forbidden-ip to exclude specific IP addresses from dynamic allocation. Use undo dhcp server forbidden-ip to remove the configuration. dhcp server forbidden-ip low-ip-address [ high-ip-address ] undo dhcp server forbidden-ip low-ip-address [ high-ip-address ] 20

31 All IP addresses in a DHCP address pool are assignable except IP addresses of the DHCP server interfaces. System view low-ip-address: Specifies the start IP address. high-ip-address: Specifies the end IP address, which must have a higher sequence than the start one. When you use the dhcp server forbidden-ip command to exclude an IP address that is bound to a user from dynamic assignment, the address can be still assigned to the user. When you use the undo dhcp server forbidden-ip command to remove the configuration, the specified address/address range must be consistent with the one specified with the dhcp server forbidden-ip command. If you have configured to exclude an address range from dynamic assignment, you need to specify the same address range in the undo dhcp server forbidden-ip command instead of specifying one IP address. You can exclude multiple IP address ranges from allocation. # Exclude the IP addresses through from dynamic allocation. [Sysname] dhcp server forbidden-ip Related commands display dhcp server forbidden-ip dhcp server ip-pool network static-bind ip-address dhcp server ip-pool Use dhcp server ip-pool to create a DHCP address pool and enter its view. If the pool has been created, you directly enter its view. Use undo dhcp server ip-pool to remove the specified DHCP address pool. dhcp server ip-pool pool-name [ extended ] undo dhcp server ip-pool pool-name No DHCP address pool is created. System view 21

32 pool-name: Specifies the name for the global address pool, a string of 1 to 35 characters used to uniquely identify this pool. extended: Specifies the address pool as an extended address pool. If this keyword is not specified, the address pool is a common address pool. # Create the common address pool identified by 0. [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] Related commands dhcp enable display dhcp server tree dhcp server ping packets Use dhcp server ping packets to specify the maximum number of ping packets. Use undo dhcp server ping packets to restore the default. dhcp server ping packets number undo dhcp server ping packets The maximum number of ping packets is 1. System view number: Specifies the maximum number of ping packets, in the range of 0 to 10. The value of 0 means that the DHCP server does not perform address conflict detection. To avoid IP address conflicts, the DHCP server checks whether an IP address is in use before assigning it to a DHCP client. The DHCP server pings the IP address. If the server gets a response within the specified period, the server believes that the IP address is in use, selects and pings another IP address. If not, the server pings the IP address again until the maximum number of ping packets are sent. If still no response is received, the server assigns the IP address to the requesting client. # Specify the maximum number of ping packets as 10. [Sysname] dhcp server ping packets 10 22

33 dhcp server ping timeout Use dhcp server ping timeout to configure the ping response timeout time on the DHCP server. Use undo dhcp server ping timeout to restore the default. dhcp server ping timeout milliseconds undo dhcp server ping timeout The ping response timeout time is 500 ms. System view milliseconds: Specifies the timeout time in the range of 0 to milliseconds. The value of 0 means that no ping operation is performed for address conflict detection. To avoid IP address conflicts, the DHCP server checks whether an IP address is in use before assigning it to a DHCP client. The DHCP server pings the IP address. If the server gets a response within the specified interval, it believes that the IP address is in use, and selects and pings another IP address. If not, the server pings the IP address again until the maximum number of ping packets are sent. If still no response is received, the server assigns the IP address to the requesting client. # Specify the response timeout time as 1000 ms. [Sysname] dhcp server ping timeout 1000 dhcp server relay information enable Use dhcp server relay information enable to enable the DHCP server to handle Option 82. Use undo dhcp server relay information enable to configure the DHCP server to ignore Option 82. dhcp server relay information enable undo dhcp server relay information enable The DHCP server handles Option 82. System view 23

34 # Configure the DHCP server to ignore Option 82. [Sysname] undo dhcp server relay information enable dhcp server threshold Use dhcp server threshold to enable the DHCP server to send trap messages to the network management server when the specified threshold is reached. Use undo dhcp server threshold to restore the default. dhcp server threshold { allocated-ip threshold-value average-ip-use threshold-value max-ip-use threshold-value } undo dhcp server threshold { allocated-ip average-ip-use max-ip-use } The DHCP server does not send trap messages to the network management server. System view allocated-ip threshold-value: Enables the DHCP server to send trap messages to the network management server when the ratio of successfully allocated IP addresses to received DHCP requests within 5 minutes reaches the threshold specified by the threshold-value argument. The threshold is a percentage value ranging from 1 to 100. average-ip-use threshold-value: Enables the DHCP server to send trap messages to the network management server when the average IP address utilization of an address pool within 5 minutes reaches the threshold specified by the threshold-value argument. The threshold is a percentage value ranging from 1 to 100. max-ip-use threshold-value: Enables the DHCP server to send trap messages to the network management server when the maximum IP address utilization of an address pool within 5 minutes reaches the threshold specified by the threshold-value argument. The threshold is a percentage value ranging from 1 to 100. # Enable the DHCP server to send trap messages to the network management server when the ratio of successfully allocated IP addresses to received DHCP requests within 5 minutes exceeds 50%. [Sysname] dhcp server threshold allocated-ip 50 # Enable the DHCP server to send trap messages to the network management server when the average IP address utilization of an address pool within 5 minutes exceeds 80%. [Sysname] dhcp server threshold average-ip-use 80 # Enable the DHCP server to send trap messages to the network management server when the maximum IP address utilization of an address pool within 5 minutes exceeds 80%. [Sysname] dhcp server threshold max-ip-use 80 24

35 dhcp update arp (for DHCP server) Use dhcp update arp to configure the DHCP server to support authorized ARP. Use undo dhcp update arp to restore the default. dhcp update arp undo dhcp update arp The DHCP server does not support authorized ARP. Interface view # Configure Ethernet 1/1 of the current DHCP server to support authorized ARP. [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] dhcp update arp display dhcp server conflict Use display dhcp server conflict to display information about IP address conflicts. display dhcp server conflict { all ip ip-address } [ { begin exclude include } regular-expression ] Any view 1: Monitor level all: Displays information about all IP address conflicts. ip-address: Displays conflict information for the specified IP address. If no IP address is specified, this command displays information about all IP address conflicts. : Filters command output by specifying a regular expression. For more information about regular expressions, see HPE FlexNetwork MSR Router Series Comware 5 Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. 25

36 # Display information about all IP address conflicts. <Sysname> display dhcp server conflict all Address Discover time Apr :57: Apr :00: total 2 entry --- Table 2 Command output Field Address Discover Time Description Conflicted IP address. Time when the conflict was discovered. Related commands reset dhcp server conflict display dhcp server expired Use display dhcp server expired to display lease expiration information. display dhcp server expired { all ip ip-address pool [ pool-name ] } [ { begin exclude include } regular-expression ] Any view 1: Monitor level all: Displays the lease expiration information of all DHCP address pools. ip ip-address: Displays the lease expiration information for the specified IP address. pool [ pool-name ]: Displays the lease expiration information for the specified address pool. The pool name is a string of 1 to 35 characters. If the pool name is not specified, the lease expiration information of all address pools is displayed. : Filters command output by specifying a regular expression. For more information about regular expressions, see HPE FlexNetwork MSR Router Series Comware 5 Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. DHCP assigns these expired IP addresses to DHCP clients when all available addresses have been assigned. # Display all lease expiration information. 26