Enable or Disable ARP Suppression and Neighbor Discovery (ND)

About this task

Follow this procedure to enable or disable ARP Suppression and Neighbor Discovery (ND) on a tenant EPG when you configure network property during EPG update operations.

Note

• Latest value will be effective for EPG update and delete on suppress-arp and suppress-nd on common-ctag.
• You can only configure suppress-arp and suppress-ND attributes on a Layer 3 network EPG. It cannot be reconciled if an L2 VLAN or BD is configured OOB.

Run the following command to enable or disable ARP Suppression and Neighbor Discovery (ND) on a tenant EPG:

When you delete a network property, a default value of "false" is configured.

efa tenant epg update –-name <epg-name> --tenant <tenant-name> 
         --operation  <network-propert-add | <network-property-update> | < network-property-delete>
         --suppress-arp <ctag:suppress-arp> --suppress-nd <ctag:suppress-nd>

Example

• Layer 2 EPG Create
  

  efa tenant epg create --name epg5 --tenant t1  --ctag-range 241 --switchport-mode trunk-no-default-native --port 10.20.246.15[0/17],10.20.246.16[0/17]    
  EndpointGroup created successfully.

• Layer 2 EPG Update
  

  efa tenant epg update --tenant t1 --name epg5 --operation network-property-update –suppress-arp 241:true	
  Error:  Suppress ARP/ND configuration is not configured on L2 Network EPG

• Layer 3 EPG Create
  

  efa tenant epg create --name epg1 --tenant t1 --switchport-mode trunk --port 10.20.246.15[0/12],10.20.246.16[0/12] --ctag-range 211-213 --vrf vrf11 --anycast-ip 211:33.1.1.1/24 --anycast-ipv6 212:500::10/31 --anycast-ipv6 213:600::10/31 --anycast-ip 213:43.1.1.2/24
   
   
  efa tenant epg show --name epg1 --tenant t1 --detail
  ===============================================================================================================================================================
  Name          : epg1
  Tenant        : t1
  Type          : extension
  State         : epg-with-port-group-and-ctag-range
  Description   :
   
  Ports         : 10.20.246.15[0/12]
                : 10.20.246.16[0/12]
  POs           :
  Port Property : SwitchPort Mode               : trunk
                : Native Vlan Tagging           : false
                : Single-Homed BFD Session Type : auto
  NW Policy     : Ctag Range                    : 211-213
                : VRF                           : vrf11
                : L3Vni                         : 8160
   
  +------------+-------------+-----------+------------+-------------+
  | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
  +------------+-------------+-----------+------------+-------------+
  Port Property ACLs
   
  +--------------------+-------------+-------------+
  |        Port        |  Dev State  |  App State  |
  +--------------------+-------------+-------------+
  | 10.20.246.15[0/12] | provisioned | cfg-in-sync |
  +--------------------+-------------+-------------+
  | 10.20.246.16[0/12] | provisioned | cfg-in-sync |
  +--------------------+-------------+-------------+
  Port Property States
   
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |       Local IP        | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
  |      |       Description       |       |         |              |              |  ARP/ND  | [Device-IP->Local-IP] |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | 211  | Tenant L3 Extended VLAN |  211  |         | 33.1.1.1/24  |              |   T/F    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | 212  | Tenant L3 Extended VLAN |  212  |         |              |  500::10/31  |   F/T    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | 213  | Tenant L3 Extended VLAN |  213  |         | 43.1.1.2/24  |  600::10/31  |   T/T    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
  |      |                         |       |         |              |              |          |                       |               |        |         |                |              |             |             |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  Network Property [Flags : * - Native Vlan]
   
  +------+----------------+--------------+----------------+--------------------+-------------+
  | Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
  +------+----------------+--------------+----------------+--------------------+-------------+
  IPv6 ND Prefix Flags
   
  +------+------------+-------------+-----------+------------+-------------+
  | Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
  +------+------------+-------------+-----------+------------+-------------+
  Network Property ACLs
   
  +------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
  | Ctag |           AddressIP           | AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR  |                GatewayIP :                  |              GatewayIPv6 :                |
  |      | Device-IP->[{Address-IP,Vrf}] |  Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]   | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
  |      |                               |                                                    |        Device-IP->{InfType,InfName}         |                                           |
  +------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
  DHCP Relay Ips
   
  For 'unstable' entities, run 'efa tenant po/vrf show' for details

• Layer 3 EPG Update (network-property-add) with suppress-rap true and suppress-ND true
  

  efa tenant epg update --tenant t1 --name epg1 --operation network-property-add –suppress-arp 211:true –suppress-nd 211:true
  EndpointGroup updated successfully.
   
   
  efa tenant epg show --name epg1 --tenant t1 --detail
  ===============================================================================================================================================================
  Name          : epg1
  Tenant        : t1
  Type          : extension
  State         : epg-with-port-group-and-ctag-range
  Description   :
   
  Ports         : 10.20.246.15[0/12]
                : 10.20.246.16[0/12]
  POs           :
  Port Property : SwitchPort Mode               : trunk
                : Native Vlan Tagging           : false
                : Single-Homed BFD Session Type : auto
  NW Policy     : Ctag Range                    : 211-213
                : VRF                           : vrf11
                : L3Vni                         : 8160
   
  +------------+-------------+-----------+------------+-------------+
  | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
  +------------+-------------+-----------+------------+-------------+
  Port Property ACLs
   
  +--------------------+-------------+-------------+
  |        Port        |  Dev State  |  App State  |
  +--------------------+-------------+-------------+
  | 10.20.246.15[0/12] | provisioned | cfg-in-sync |
  +--------------------+-------------+-------------+
  | 10.20.246.16[0/12] | provisioned | cfg-in-sync |
  +--------------------+-------------+-------------+
  Port Property States
   
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |       Local IP        | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
  |      |       Description       |       |         |              |              |  ARP/ND  | [Device-IP->Local-IP] |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | 211  | Tenant L3 Extended VLAN |  211  |         | 33.1.1.1/24  |              |   F/T    |                       |      F/F     |        |          |     false      |    false     | provisioned | cfg-in-sync |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | 212  | Tenant L3 Extended VLAN |  212  |         |              |  500::10/31  |   F/T    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | 213  | Tenant L3 Extended VLAN |  213  |         | 43.1.1.2/24  |  600::10/31  |   T/T    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
  |      |                         |       |         |              |              |          |                       |               |        |         |                |              |             |             |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  Network Property [Flags : * - Native Vlan]
   
  +------+----------------+--------------+----------------+--------------------+-------------+
  | Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
  +------+----------------+--------------+----------------+--------------------+-------------+
  IPv6 ND Prefix Flags
   
  +------+------------+-------------+-----------+------------+-------------+
  | Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
  +------+------------+-------------+-----------+------------+-------------+
  Network Property ACLs
   
  +------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
  | Ctag |           AddressIP           | AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR  |                GatewayIP :                  |              GatewayIPv6 :                |
  |      | Device-IP->[{Address-IP,Vrf}] |  Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]   | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
  |      |                               |                                                    |        Device-IP->{InfType,InfName}         |                                           |
  +------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
  DHCP Relay Ips
   
  For 'unstable' entities, run 'efa tenant po/vrf show' for details
  ===============================================================================================================================================================

• Layer 3 EPG Update (network-property-update) with suppress-rap true and suppress-ND false
  

  efa tenant epg update --tenant t1 --name epg1 --operation network-property-update --suppress-arp 212:true –suppress-nd 213:false 
  EndpointGroup updated successfully.
   
   
  efa tenant epg show --name epg1 --tenant t1 --detail
  ===============================================================================================================================================================
  Name          : epg1
  Tenant        : t1
  Type          : extension
  State         : epg-with-port-group-and-ctag-range
  Description   :
  Ports         : 10.20.246.15[0/12]
                : 10.20.246.16[0/12]
  POs           :
  Port Property : SwitchPort Mode               : trunk
                : Native Vlan Tagging           : false
                : Single-Homed BFD Session Type : auto
  NW Policy     : Ctag Range                    : 211-213
                : VRF                           : vrf11
                : L3Vni                         : 8160
  +------------+-------------+-----------+------------+-------------+
  | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
  +------------+-------------+-----------+------------+-------------+
  Port Property ACLs
   
  +--------------------+-------------+-------------+
  |        Port        |  Dev State  |  App State  |
  +--------------------+-------------+-------------+
  | 10.20.246.15[0/12] | provisioned | cfg-in-sync |
  +--------------------+-------------+-------------+
  | 10.20.246.16[0/12] | provisioned | cfg-in-sync |
  +--------------------+-------------+-------------+
  Port Property States
  +------+-------------------------+-------+------+-------------+------------+----------+-----------------------+---------------+-----+---------+----------------+--------------+-------------+-------------+
  | Ctag |          Ctag           | L2Vni | BD   | Anycast     | Anycast    | Suppress |       Local IP        | Icmp Redirect | IP  | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
  |      |       Description       |       | Name | IPv4        | IPv6       |  ARP/ND  | [Device-IP->Local-IP] |   IPv4/IPv6   | MTU |   MTU   | Managed Config | Other Config |             |             |
  +------+-------------------------+-------+------+-------------+------------+----------+-----------------------+---------------+-----+---------+----------------+--------------+-------------+-------------+
  | 211  | Tenant L3 Extended VLAN |  211  |      | 33.1.1.1/24 |            |   F/T    |                       |      F/F      |     |         |     false      |    false     | provisioned | cfg-in-sync |
  +------+-------------------------+-------+------+-------------+------------+----------+-----------------------+---------------+-----+---------+----------------+--------------+-------------+-------------+
  | 212  | Tenant L3 Extended VLAN |  212  |      |             | 500::10/31 |   T/T    |                       |      F/F      |     |         |     false      |    false     | provisioned | cfg-in-sync |
  +------+-------------------------+-------+------+-------------+------------+----------+-----------------------+---------------+-----+---------+----------------+--------------+-------------+-------------+
  | 213  | Tenant L3 Extended VLAN |  213  |      | 43.1.1.2/24 | 600::10/31 |   T/F    |                       |      F/F      |     |         |     false      |    false     | provisioned | cfg-in-sync |
  |      |                         |       |      |             |            |          |                       |               |     |         |                |              |             |             |
  +------+-------------------------+-------+------+-------------+------------+----------+-----------------------+---------------+-----+---------+----------------+--------------+-------------+-------------+
  Network Property [Flags : * - Native Vlan]
   
  +------+----------------+--------------+----------------+--------------------+-------------+
  | Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
  +------+----------------+--------------+----------------+--------------------+-------------+
  IPv6 ND Prefix Flags
   
  +------+------------+-------------+-----------+------------+-------------+
  | Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
  +------+------------+-------------+-----------+------------+-------------+
  Network Property ACLs
   
  +------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
  | Ctag |           AddressIP           | AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR  |                GatewayIP :                  |              GatewayIPv6 :                |
  |      | Device-IP->[{Address-IP,Vrf}] |  Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]   | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
  |      |                               |                                                    |        Device-IP->{InfType,InfName}         |                                           |
  +------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
  DHCP Relay Ips
   
  For 'unstable' entities, run 'efa tenant po/vrf show' for details

• Layer 3 EPG Update (network-property-delete)
  

  efa tenant epg update --tenant t1 --name epg1 --operation network-property-delete --suppress-arp 211:false –suppress-nd 211:false
  EndpointGroup updated successfully.
   
   
  efa tenant epg show --name epg1 --tenant t1 --detail
  ===============================================================================================================================================================
  Name          : epg1
  Tenant        : t1
  Type          : extension
  State         : epg-with-port-group-and-ctag-range
  Description   :
   
  Ports         : 10.20.246.15[0/12]
                : 10.20.246.16[0/12]
  POs           :
  Port Property : SwitchPort Mode               : trunk
                : Native Vlan Tagging           : false
                : Single-Homed BFD Session Type : auto
  NW Policy     : Ctag Range                    : 211-213
                : VRF                           : vrf11
                : L3Vni                         : 8160
   
  +------------+-------------+-----------+------------+-------------+
  | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
  +------------+-------------+-----------+------------+-------------+
  Port Property ACLs
   
  +--------------------+-------------+-------------+
  |        Port        |  Dev State  |  App State  |
  +--------------------+-------------+-------------+
  | 10.20.246.15[0/12] | provisioned | cfg-in-sync |
  +--------------------+-------------+-------------+
  | 10.20.246.16[0/12] | provisioned | cfg-in-sync |
  +--------------------+-------------+-------------+
  Port Property States
   
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |       Local IP        | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
  |      |       Description       |       |         |              |              |  ARP/ND  | [Device-IP->Local-IP] |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | 211  | Tenant L3 Extended VLAN |  211  |         | 33.1.1.1/24  |              |   F/F    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | 212  | Tenant L3 Extended VLAN |  212  |         |              |  500::10/31  |   T/T    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  | 213  | Tenant L3 Extended VLAN |  213  |         | 43.1.1.2/24  |  600::10/31  |   T/F    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
  |      |                         |       |         |              |              |          |                       |               |        |         |                |              |             |             |
  +------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
  Network Property [Flags : * - Native Vlan]
   
  +------+----------------+--------------+----------------+--------------------+-------------+
  | Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
  +------+----------------+--------------+----------------+--------------------+-------------+
  IPv6 ND Prefix Flags
   
  +------+------------+-------------+-----------+------------+-------------+
  | Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
  +------+------------+-------------+-----------+------------+-------------+
  Network Property ACLs
   
  +------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
  | Ctag |           AddressIP           | AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR  |                GatewayIP :                  |              GatewayIPv6 :                |
  |      | Device-IP->[{Address-IP,Vrf}] |  Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]   | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
  |      |                               |                                                    |        Device-IP->{InfType,InfName}         |                                           |
  +------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
  DHCP Relay Ips
    For 'unstable' entities, run 'efa tenant po/vrf show' for details

• SLX configuration

  Rack1-Device1# show run vlan 211-213 vlan 211 router-interface Ve 211 description Tenant L3 Extended VLAN ! vlan 212 router-interface Ve 212 suppress-nd suppress-arp description Tenant L3 Extended VLAN ! vlan 213 router-interface Ve 213 suppress-arp description Tenant L3 Extended VLAN !

  Rack1-Device2# show run vlan 211-213 vlan 211 router-interface Ve 211 description Tenant L3 Extended VLAN ! vlan 212 router-interface Ve 212 suppress-nd suppress-arp description Tenant L3 Extended VLAN ! vlan 213 router-interface Ve 213 suppress-arp description Tenant L3 Extended VLAN !