Modifying ARP settings using CLI (Command Line Interface)
03/26/2020 12 People found this article helpful 44,663 Views
This article focuses on modifying ARP settings on your SonicWall device using the CLI (Command Line Interface).
Step 1: Log into the appliance's CLI and enter configuration mode.
Step 2: In order to find the available options, please type arp and hit Tab
Step 3: In order to create a static ARP entry, type:
arp entry 184.108.40.206 00:01:02:03:04:07 X3 and hit Enter, then type commit and hit Enter one more time.
The output will be as follows:
Please note, that after the command has been typed, the CLI shows:
Hit Tab in order to see further options for modifying the newly created ARP entry:
The available static ARP Commands are:
bind-mac : binds MAC address to the designated IP address and interface
in terface: you may choose the interface the entry is connected to, type interface x4 and hit Enter and commit and Enter one more time to apply changes
ip: enables you to choose the IP address the entry is connected to
mac : enables you to choose the MAC address the entry is connected to
publish: makes the unit respond to ARP requests for the specified IP address with the specified MAC address
Step 4: When you go back to configuration mode config(C0EAE4009930)# you may configure all ARP entries generally, not only the chosen entry.
T ype arp flush all-cache and hit Enter. All existing ARP cache entries will be flushed.
By typing arp flush cache and hitting Tab you may choose which entry to flush (it does not include the static ARP entries).
In our case we will choose 220.127.116.11 located on X1:
When you type arp glean and hit Enter and after that commit and Enter you enable the functionality with which the firewall will populate the ARP cache with source IP and MAC addresses obtained from inbound ARP requests.
In order to turn the arp glean functionality off, please type no arp glean, hit Enter and type commit and hit Enter one more time.
If you would like to modify ARP timeout values (by default it is set to 20 minutes) type arp timeout 25, hit enter, then type commit and Enter again.
Lastly, if you would like to delete the static ARP entry type no arp entry 18.104.22.168 000102030407 X4 hit Enter and type commit and hit enter one more time.