Enable or Disable ARP Suppression and Neighbor Discovery (ND)

You can enable or disable ARP Suppression and Neighbor Discovery (ND).

About this task

Follow this procedure to enable or disable ARP Suppression and Neighbor Discovery (ND) on a tenant EPG when you configure network property during EPG update operations.

Note

Latest value will be effective for EPG update and delete on suppress-arp and suppress-nd on common-ctag.

Procedure

Run the following command to enable or disable ARP Suppression and Neighbor Discovery (ND) on a tenant EPG:

When you delete a network property, a default value of "false" is configured.

efa tenant epg update –-name <epg-name> --tenant <tenant-name> 
         --operation  <network-propert-add | <network-property-update> | < network-property-delete>
         --suppress-arp <ctag:suppress-arp> --suppress-nd <ctag:suppress-nd>

Example

Layer 2 EPG Create

efa tenant epg create --name epg5 --tenant t1  --ctag-range 241 --switchport-mode trunk-no-default-native --port 10.20.246.15[0/17],10.20.246.16[0/17]    
EndpointGroup created successfully.

Layer 2 EPG Update

efa tenant epg update --tenant t1 --name epg5 --operation network-property-update –suppress-arp 241:true	
Error:  Suppress ARP/ND configuration is not configured on L2 Network EPG

Layer 3 EPG Create

efa tenant epg create --name epg1 --tenant t1 --switchport-mode trunk --port 10.20.246.15[0/12],10.20.246.16[0/12] --ctag-range 211-213 --vrf vrf11 --anycast-ip 211:33.1.1.1/24 --anycast-ipv6 212:500::10/31 --anycast-ipv6 213:600::10/31 --anycast-ip 213:43.1.1.2/24
 
 
efa tenant epg show --name epg1 --tenant t1 --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   :
 
Ports         : 10.20.246.15[0/12]
              : 10.20.246.16[0/12]
POs           :
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 211-213
              : VRF                           : vrf11
              : L3Vni                         : 8160
 
+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs
 
+--------------------+-------------+-------------+
|        Port        |  Dev State  |  App State  |
+--------------------+-------------+-------------+
| 10.20.246.15[0/12] | provisioned | cfg-in-sync |
+--------------------+-------------+-------------+
| 10.20.246.16[0/12] | provisioned | cfg-in-sync |
+--------------------+-------------+-------------+
Port Property States
 
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |       Local IP        | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |       Description       |       |         |              |              |  ARP/ND  | [Device-IP->Local-IP] |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| 211  | Tenant L3 Extended VLAN |  211  |         | 33.1.1.1/24  |              |   T/F    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| 212  | Tenant L3 Extended VLAN |  212  |         |              |  500::10/31  |   F/T    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| 213  | Tenant L3 Extended VLAN |  213  |         | 43.1.1.2/24  |  600::10/31  |   T/T    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
|      |                         |       |         |              |              |          |                       |               |        |         |                |              |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
Network Property [Flags : * - Native Vlan]
 
+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags
 
+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs
 
+------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           | AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR  |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |  Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]   | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                    |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips
 
For 'unstable' entities, run 'efa tenant po/vrf show' for details

Layer 3 EPG Update (network-property-add) with suppress-arp false and suppress-nd true

efa tenant epg update --tenant t1 --name epg1 --operation network-property-add –suppress-arp 211:false –suppress-nd 211:true
EndpointGroup updated successfully.
 
 
efa tenant epg show --name epg1 --tenant t1 --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   :
 
Ports         : 10.20.246.15[0/12]
              : 10.20.246.16[0/12]
POs           :
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 211-213
              : VRF                           : vrf11
              : L3Vni                         : 8160
 
+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs
 
+--------------------+-------------+-------------+
|        Port        |  Dev State  |  App State  |
+--------------------+-------------+-------------+
| 10.20.246.15[0/12] | provisioned | cfg-in-sync |
+--------------------+-------------+-------------+
| 10.20.246.16[0/12] | provisioned | cfg-in-sync |
+--------------------+-------------+-------------+
Port Property States
 
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |       Local IP        | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |       Description       |       |         |              |              |  ARP/ND  | [Device-IP->Local-IP] |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| 211  | Tenant L3 Extended VLAN |  211  |         | 33.1.1.1/24  |              |   F/T    |                       |      F/F     |        |          |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| 212  | Tenant L3 Extended VLAN |  212  |         |              |  500::10/31  |   F/T    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| 213  | Tenant L3 Extended VLAN |  213  |         | 43.1.1.2/24  |  600::10/31  |   T/T    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
|      |                         |       |         |              |              |          |                       |               |        |         |                |              |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
Network Property [Flags : * - Native Vlan]
 
+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags
 
+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs
 
+------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           | AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR  |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |  Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]   | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                    |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips
 
For 'unstable' entities, run 'efa tenant po/vrf show' for details
===============================================================================================================================================================

Layer 3 EPG Update (network-property-update) with suppress-arp true and suppress-nd false

efa tenant epg update --tenant t1 --name epg1 --operation network-property-update --suppress-arp 212:true –suppress-nd 213:false 
EndpointGroup updated successfully.
 
 
efa tenant epg show --name epg1 --tenant t1 --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   :
Ports         : 10.20.246.15[0/12]
              : 10.20.246.16[0/12]
POs           :
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 211-213
              : VRF                           : vrf11
              : L3Vni                         : 8160
+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs
 
+--------------------+-------------+-------------+
|        Port        |  Dev State  |  App State  |
+--------------------+-------------+-------------+
| 10.20.246.15[0/12] | provisioned | cfg-in-sync |
+--------------------+-------------+-------------+
| 10.20.246.16[0/12] | provisioned | cfg-in-sync |
+--------------------+-------------+-------------+
Port Property States
+------+-------------------------+-------+------+-------------+------------+----------+-----------------------+---------------+-----+---------+----------------+--------------+-------------+-------------+
| Ctag |          Ctag           | L2Vni | BD   | Anycast     | Anycast    | Suppress |       Local IP        | Icmp Redirect | IP  | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |       Description       |       | Name | IPv4        | IPv6       |  ARP/ND  | [Device-IP->Local-IP] |   IPv4/IPv6   | MTU |   MTU   | Managed Config | Other Config |             |             |
+------+-------------------------+-------+------+-------------+------------+----------+-----------------------+---------------+-----+---------+----------------+--------------+-------------+-------------+
| 211  | Tenant L3 Extended VLAN |  211  |      | 33.1.1.1/24 |            |   F/T    |                       |      F/F      |     |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+------+-------------+------------+----------+-----------------------+---------------+-----+---------+----------------+--------------+-------------+-------------+
| 212  | Tenant L3 Extended VLAN |  212  |      |             | 500::10/31 |   T/T    |                       |      F/F      |     |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+------+-------------+------------+----------+-----------------------+---------------+-----+---------+----------------+--------------+-------------+-------------+
| 213  | Tenant L3 Extended VLAN |  213  |      | 43.1.1.2/24 | 600::10/31 |   T/F    |                       |      F/F      |     |         |     false      |    false     | provisioned | cfg-in-sync |
|      |                         |       |      |             |            |          |                       |               |     |         |                |              |             |             |
+------+-------------------------+-------+------+-------------+------------+----------+-----------------------+---------------+-----+---------+----------------+--------------+-------------+-------------+
Network Property [Flags : * - Native Vlan]
 
+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags
 
+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs
 
+------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           | AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR  |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |  Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]   | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                    |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips
 
For 'unstable' entities, run 'efa tenant po/vrf show' for details

Layer 3 EPG Update (network-property-delete)

efa tenant epg update --tenant t1 --name epg1 --operation network-property-delete --suppress-arp 211:false –suppress-nd 211:false
EndpointGroup updated successfully.
 
 
efa tenant epg show --name epg1 --tenant t1 --detail
===============================================================================================================================================================
Name          : epg1
Tenant        : t1
Type          : extension
State         : epg-with-port-group-and-ctag-range
Description   :
 
Ports         : 10.20.246.15[0/12]
              : 10.20.246.16[0/12]
POs           :
Port Property : SwitchPort Mode               : trunk
              : Native Vlan Tagging           : false
              : Single-Homed BFD Session Type : auto
NW Policy     : Ctag Range                    : 211-213
              : VRF                           : vrf11
              : L3Vni                         : 8160
 
+------------+-------------+-----------+------------+-------------+
| MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------------+-------------+-----------+------------+-------------+
Port Property ACLs
 
+--------------------+-------------+-------------+
|        Port        |  Dev State  |  App State  |
+--------------------+-------------+-------------+
| 10.20.246.15[0/12] | provisioned | cfg-in-sync |
+--------------------+-------------+-------------+
| 10.20.246.16[0/12] | provisioned | cfg-in-sync |
+--------------------+-------------+-------------+
Port Property States
 
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| Ctag |          Ctag           | L2Vni | BD Name | Anycast IPv4 | Anycast IPv6 | Suppress |       Local IP        | Icmp Redirect | IP MTU | IPv6 ND |    IPv6 ND     |   IPv6 ND    |  Dev State  |  App State  |
|      |       Description       |       |         |              |              |  ARP/ND  | [Device-IP->Local-IP] |   IPv4/IPv6   |        |   MTU   | Managed Config | Other Config |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| 211  | Tenant L3 Extended VLAN |  211  |         | 33.1.1.1/24  |              |   F/F    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| 212  | Tenant L3 Extended VLAN |  212  |         |              |  500::10/31  |   T/T    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
| 213  | Tenant L3 Extended VLAN |  213  |         | 43.1.1.2/24  |  600::10/31  |   T/F    |                       |      F/F      |        |         |     false      |    false     | provisioned | cfg-in-sync |
|      |                         |       |         |              |              |          |                       |               |        |         |                |              |             |             |
+------+-------------------------+-------+---------+--------------+--------------+----------+-----------------------+---------------+--------+---------+----------------+--------------+-------------+-------------+
Network Property [Flags : * - Native Vlan]
 
+------+----------------+--------------+----------------+--------------------+-------------+
| Ctag | IPv6 ND Prefix | No Advertise | Valid Lifetime | Preferred Lifetime | Config Type |
+------+----------------+--------------+----------------+--------------------+-------------+
IPv6 ND Prefix Flags
 
+------+------------+-------------+-----------+------------+-------------+
| Ctag | MAC ACL IN | MAC ACL OUT | IP ACL IN | IP ACL OUT | IPv6 ACL IN |
+------+------------+-------------+-----------+------------+-------------+
Network Property ACLs
 
+------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
| Ctag |           AddressIP           | AddressIPv6 :  Device-IP->[{Address-IPv6,Vrf}] OR  |                GatewayIP :                  |              GatewayIPv6 :                |
|      | Device-IP->[{Address-IP,Vrf}] |  Device-IP->[{Address-IPv6,Vrf,InfType,InfName}]   | Device-IP->{Gateway-IP,InfType,InfName} OR  | Device-IP->{InfType,InfName,Gateway-IPv6} |
|      |                               |                                                    |        Device-IP->{InfType,InfName}         |                                           |
+------+-------------------------------+----------------------------------------------------+---------------------------------------------+-------------------------------------------+
DHCP Relay Ips
  For 'unstable' entities, run 'efa tenant po/vrf show' for details

SLX configuration

Rack1-Device1# show run vlan 211-213 vlan 211 router-interface Ve 211 description Tenant L3 Extended VLAN ! vlan 212 router-interface Ve 212 suppress-nd suppress-arp description Tenant L3 Extended VLAN ! vlan 213 router-interface Ve 213 suppress-arp description Tenant L3 Extended VLAN !	Rack1-Device2# show run vlan 211-213 vlan 211 router-interface Ve 211 description Tenant L3 Extended VLAN ! vlan 212 router-interface Ve 212 suppress-nd suppress-arp description Tenant L3 Extended VLAN ! vlan 213 router-interface Ve 213 suppress-arp description Tenant L3 Extended VLAN !

Rack1-Device1# show run vlan 211-213
vlan 211
 router-interface Ve 211
 description Tenant L3 Extended VLAN
!
vlan 212
 router-interface Ve 212
 suppress-nd
 suppress-arp
 description Tenant L3 Extended VLAN
!
vlan 213
 router-interface Ve 213
 suppress-arp
 description Tenant L3 Extended VLAN
!

Rack1-Device2# show run vlan 211-213
vlan 211
 router-interface Ve 211
 description Tenant L3 Extended VLAN
!
vlan 212
 router-interface Ve 212
 suppress-nd
 suppress-arp
 description Tenant L3 Extended VLAN
!
vlan 213
 router-interface Ve 213
 suppress-arp
 description Tenant L3 Extended VLAN
!