Disables ARP learning on the specified VLAN and member ports.
| vlan_name | Specifies the name of the VLAN to which this rule applies. |
| dynamic | Configuration options for dynamically created VLANs. |
| all | Specifies all ingress ports. |
| ports | Specifies one or more ingress ports. |
By default, ARP learning is enabled.
You can disable ARP learning so that the only entries in the ARP table are either manually added or those created by DHCP secured ARP; the switch does not add entries by tracking ARP requests and replies. By disabling ARP learning and adding a permanent entry or configuring DHCP secured ARP, you can centrally manage and allocate client IP addresses and prevent duplicate IP addresses from interrupting network operation.
To manually add a permanent entry to the ARP table, use the following command:
configure iparp add ip_addr {vrvr_name} macTo configure DHCP secure ARP as a method to add entries to the ARP table, use the following command:
enable ip-security arp learning learn-from-dhcp vlan vlan_name ports [all | ports] {poll-interval interval_in_seconds} {retries number_of_retries}To display how the switch builds an ARP table and learns MAC addresses for devices on a specific VLAN and associated member ports, use the following command:
show ip-security arp learning {vlan} vlan_nameTo view the ARP table, including permanent and DHCP secured ARP entries, use the following command:
show iparp {ip_address | mac | vlanvlan_name | permanent} {vrvr_name}
Note
DHCP secured ARP entries are stored as static entries in the ARP table.
The following command disables ARP learning on port 1:1 of the VLAN learn:
disable ip-security arp learning learn-from-arp vlan learn ports 1:1
This command was first available in ExtremeXOS 11.6.
Dynamic VLAN option was added in ExtremeXOS 30.2.
This command is available on the ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, and X870 series switches.