Skip to content
Ask AI

ARP/ND

Table 1 ARP View

CommandPurpose
show arpDisplay ARP table entries.
clear neighbor allClear all ARP table entries.
clear neighbor interface {ethernet|link-aggregation|vlan} {interface_name[.subinterface-number]}Delete the specified ARP table entries.

[Command]

show arp

[Purpose]

Display ARP table entries.

[View]

Privileged User View

[Use Cases]

sonic# show arp
Address MacAddress Iface Vlan
------------ ----------------- ----------- ------
10.10.200.2 18:17:25:37:67:3e - 200
Total number of entries 1

[Command]

clear neighbor all

[Purpose]

Clear all ARP table entries.

[View]

Privileged User View

[Use Cases]

sonic# clear neighbor all
Section titled “clear neighbor interface {ethernet|link-aggregation|vlan} {interface_name[.subinterface-number]}”

[Command]

clear neighbor interface {ethernet|link-aggregation|vlan} {interface_name[.subinterface-number]}

[Purpose]

Delete the specified ARP table entries.

[Parameters]

ParameterDescription
interface_nameInterface name (eg.0/1)
subinterface-numberSubinterface number.

[View]

Privileged User View

[Use Cases]

sonic# clear neighbor interface ethernet 0/2

Table 2 ARP Config

CommandPurpose
arp static A.B.C.D HH:HH:HH:HH:HH:HH interface {ethernet|link-aggregation|vlan} interface_name[.subinterface-number]Configure static ARP table entries.
arp timeout aging-timeConfigure ARP aging time.
arp probe interval timeConfigure ARP probe interval.
arp probe times probe-timesConfigure ARP probe times.

[Command]

arp static A.B.C.D HH:HH:HH:HH:HH:HH interface {ethernet|link-aggregation|vlan} interface_name[.subinterface-number]

[Purpose]

Configure static ARP table entries.

[Parameters]

ParameterDescription
A.B.C.DIPv4 address
HH:HH:HH:HH:HH:HHMAC address.
interface_nameInterface name (eg.0/1)
subinterface-numberSubinterface number.

[View]

Global Configuration View

[Notes]

Run command no arp static A.B.C.D HH:HH:HH:HH:HH:HH interface {ethernet|link-aggregation|vlan} interface_name[.subinterface-number] to delete static ARP entries.

[Use Cases]

sonic# configure terminal
sonic(config)# arp static 3.3.3.3 00:00:00:00:00:01 interface vlan 5
sonic(config)# arp static 4.4.4.4 00:00:00:00:00:02 interface ethernet 0/1
sonic(config)# arp static 5.5.5.5 00:00:00:00:00:03 interface link-aggregation 1

[Command]

arp timeout aging-time

[Purpose]

Configure ARP aging time.

[Parameters]

ParameterDescription
aging-timeSpecify the aging time in seconds. The default ARP aging time is 300s, and the range is from 60 to 86400.

[View]

Global Configuration View / Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

Run command no arp timeout to delete ARP aging time configuration and restore to default.

[Use Cases]

sonic# configure terminal
sonic(config)# arp timeout 500
sonic(config)# interface vlan 100
sonic(config-vlanif-100)# arp timeout 8500

[Command]

arp probe interval time

[Purpose]

Configure ARP probe interval.

[Parameters]

ParameterDescription
timeSpecify the interval in seconds, the default value is 6 seconds, and the range is 1~65535.

[View]

Global Configuration View / Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

Run command no arp probe interva l to delete the ARP probe interval configuration and restore the default value.

[Use Cases]

sonic# configure terminal
sonic(config)# arp probe interval 10
sonic(config)# interface ethernet 0/80
sonic(config-if-0/80)# arp probe interval 5
sonic(config-if-0/80)# no arp probe interval

[Command]

arp probe times probe-times

[Purpose]

Configure ARP probe times.

[Parameters]

ParameterDescription
probe-timesSpecify ARP probe times, the default value is 5 times, and the range is 1~65535.

[View]

Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

Run command no arp probe times to delete the ARP probe times configuration and restore the default value.

[Use Cases]

sonic# configure terminal
sonic(config)# arp probe times 10
sonic(config)# interface ethernet 0/80
sonic(config-if-0/80)# arp probe times 14
sonic(config-if-0/80)# no arp probe times

Table 3 NDP View

CommandPurpose
show ndpDisplay NDP table.

[Command]

show ndp

[Purpose]

Display NDP table.

[View]

Privileged User View

[Use Cases]

sonic# show ndp
Address MacAddress Iface Vlan Status
--------- ----------------- ---------- ------ ---------
2023::2 00:00:01:00:00:01 0/24 - PERMANENT
Total number of entries 1

Table 4 NDP Config

CommandPurpose
ndp static *A::B HH:HH:HH:HH:HH:HH *interface{ethernet|link-aggregation|vlan} interface_nameConfigure static NDP table entries.
Section titled “ndp static A::B HH:HH:HH:HH:HH:HH interface {ethernet|link-aggregation|vlan} interface_name[.subinterface-number]”

[Command]

ndp static A::B HH:HH:HH:HH:HH:HH interface {ethernet|link-aggregation|vlan} interface_name[.subinterface-number]

[Purpose]

Configure static NDP table entries.

[Parameters]

ParameterDescription
A::BIPv6 address.
HH:HH:HH:HH:HH:HHMAC address.
interface_nameInterface name (eg.0/1).
subinterface-numberSubinterface number.

[View]

Global Configuration View

[Notes]

Run command no arp static A::B HH:HH:HH:HH:HH:HH interface {ethernet|link-aggregation|vlan} interface_name[.subinterface-number] to delete static NDP.

[Use Cases]

sonic# configure terminal
sonic(config)# ndp static 2023::2 00:00:01:00:00:01 interface ethernet 0/24

There are two levels of policy for ARP/ND to host:

  • Level 1: Interface-based Interface-based policies are divided into default policy and user-defined policy. The system gives priority to matching user-defined policy. If not matched, the default policy will be used. Optional actions include permit, deny, and pass. While permit and deny mean to perform ARP/ND to host route conversion and non-conversion behavior directly without matching the next level of segment policy, pass means to skip the interface policy process and enter the next level of policy.
  • Level 2: Segment-based Segment policy is also divided into default policy and user-defined segment policy. The system matches user-defined policy first, if not matched, then the default policy will be used. Optional actions include permit and deny, which correspond to ARP/ND to host route conversion and non-conversion behavior.

Table 5 ARP/ND to Host View

CommandPurpose
show arp-to-host summaryDisplay ARP/ND to Host summary info.
show arp-to-host policyDisplay ARP/ND to Host policy configuration.

[Command]

show arp-to-host summary

[Purpose]

Display ARP/ND to host summary info.

[View]

Privileged User View

[Use Cases]

sonic# show arp-to-host summary
Vrf name Convert Fast convergence Metric
---------- --------- ------------------ --------
default enable disable 5200

[Command]

show arp-to-host policy

[Purpose]

Display ARP/ND to host policy configuration.

[View]

Privileged User View

[Use Cases]

sonic# show arp-to-host policy
Port:
Port Policy
---------- --------
0/56 permit
Network:
Vrf name Network Policy
---------- ---------- --------
default 1.1.1.1/24 permit

Table 6 ARP to Host Config

CommandPurpose
arp-to-hostEnter ARP/ND to host Configuration View.
convert enablevrf vrf_nameEnable ARP/ND-to-host for specified VRFs.
policy default_policy port vrf vrf_name {permit|deny|pass}Configure ARP/ND-to-host default interface policy.
policy port{ethernet|link-aggregation} interface_name {permit|deny|pass}Configure an ARP/ND-to-host user-defined interface policy.
policy default_policy network vrf vrf_name {permit|deny}Configure ARP/ND-to-host default segment policy.
policy network {A.B.C.D/M|X:X::X:X/M} vrf vrf_name {permit|deny}Configure ARP/ND-to-host user-defined segment policy.

[Command]

arp-to-host

[Purpose]

Enter ARP/ND-to-host Configuration View

[View]

Global Configuration View

[Use Cases]

sonic# configure terminal
sonic(config)# arp-to-host
sonic(config-arp-to-host)# convert enable vrf default

[Command]

convert enable vrf vrf_name

[Purpose]

Enable ARP/ND-to-host for specified VRFs.

[Parameters]

ParameterDescription
vrf_nameSpecify the VRF name, the default VRF is default.

[View]

ARP/ND-to-host Configuration View

[Notes]

Run command no convert enable vrf vrf_name to disable ARP/ND-to-host for specified VRFs.

[Use Cases]

sonic# configure terminal
sonic(config)# arp-to-host
sonic(config-arp-to-host)# convert enable vrf default
sonic(config-arp-to-host)# convert enable vrf 123

policy default_policy port vrf vrf_name {permit|deny|pass}

Section titled “policy default_policy port vrf vrf_name {permit|deny|pass}”

[Command]

policy default_policy port vrf vrf_name {permit|deny|pass}

[Purpose]

Configure ARP/ND-to-host default interface policy.

[Parameters]

ParameterDescription
vrf_nameSpecify the VRF name, the default VRF is default.

[View]

ARP/ND-to-host Configuration View

[Notes]

Run command no policy default_policy port vrf vrf_name to delete ARP/ND-to-host default interface policy.

[Use Cases]

sonic# configure terminal
sonic(config)# arp-to-host
sonic(config-arp-to-host)# policy default_policy port vrf default permit
Section titled “policy port {ethernet|link-aggregation} interface_name {permit|deny|pass}”

[Command]

policy port {ethernet|link-aggregation} interface_name {permit|deny|pass}

[Purpose]

Configure an ARP/ND-to-host user-defined interface policy.

[Parameters]

ParameterDescription
interface_nameInterface name (eg.0/1)

[View]

ARP/ND-to-host Configuration View

[Notes]

Run command no policy port {ethernet|link-aggregation} interface_name to delete ARP/ND-to-host user-defined interface policy.

[Use Cases]

sonic# configure terminal
sonic(config)# arp-to-host
sonic(config-arp-to-host)# policy port ethernet 0/4 permit
sonic(config-arp-to-host)# policy port link-aggregation 4 deny

policy default_policy network vrf vrf_name {permit|deny}

Section titled “policy default_policy network vrf vrf_name {permit|deny}”

[Command]

policy default_policy network vrf vrf_name {permit|deny}

[Purpose]

Configure ARP/ND-to-host default segment policy.

[Parameters]

ParameterDescription
vrf_nameSpecify the VRF name, the default VRF is default.

[View]

ARP/ND-to-host Configuration View

[Notes]

Run command no policy default_policy network vrf vrf_name to delete ARP/ND-to-host default segment policy.

[Use Cases]

sonic# configure terminal
sonic(config)# arp-to-host
sonic(config-arp-to-host)# policy default_policy network vrf default deny

policy network {A.B.C.D/M|X:X::X:X/M} vrf vrf_name {permit|deny}

Section titled “policy network {A.B.C.D/M|X:X::X:X/M} vrf vrf_name {permit|deny}”

[Command]

policy network {A.B.C.D/M|X:X::X:X/M} vrf vrf_name {permit|deny}

[Purpose]

Configure ARP/ND-to-host user-defined segment policy.

[Parameters]

ParameterDescription
A.B.C.D/MIPv4 address with prefix length.
X:X::X:X/MIPv6 address with prefix length.
vrf_nameSpecify the VRF name, the default VRF is default.

[View]

ARP/ND-to-host Configuration View

[Notes]

Run command no policy default_policy network vrf vrf_name to delete ARP/ND-to-host user-defined segment policy.

[Use Cases]

sonic# configure terminal
sonic(config)# arp-to-host
sonic(config-arp-to-host)# policy network 10.179.238.64/26 vrf 123 deny

Table 7 ARP Proxy

CommandPurpose
arp proxy [mode {default|evpn}]Enable ARP proxy.
arp proxy extend requestEnable active detection for silent terminals.
arp proxy extend replyEnable learning of ARP Reply messages.

[Command]

arp proxy [mode {default|evpn}]

[Purpose]

Enable ARP proxy.

[View]

Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

The mode can be default or evpn, and the default mode is default. Run command no arp proxy to disable ARP proxy.

[Use Cases]

sonic# configure terminal
sonic(config)# interface vlan 100
sonic(config-vlanif-100)# arp proxy
sonic(config-vlanif-100)# arp proxy mode evpn

[Command]

arp proxy extend request

[Purpose]

Enable active detection for silent terminals.

[View]

Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

This feature is enabled when there are silent terminals (terminals which do not send ARP messages actively) in the Layer 2 network. Once enabled, when the switch receives an ARP request, it will send ARP request to probe if the target ip belongs to the same network segment. Run command no arp proxy extend request to disable this feature.

[Use Cases]

sonic# configure terminal
sonic(config)# interface 0/60
sonic(config)# interface ethernet 0/60
sonic(config-if-0/60)# arp proxy extend request
sonic(config-if-0/60)# no arp proxy extend request

[Command]

arp proxy extend reply

[Purpose]

Enable learning of ARP Reply messages.

[View]

Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

Run command no arp proxy extend reply to disable this feature.

[Use Cases]

sonic# configure terminal
sonic(config)# interface ethernet 0/60
sonic(config-if-0/60)# arp proxy extend reply
sonic(config-if-0/60)# no arp proxy extend reply

Table 8 ND Proxy

CommandPurpose
nd proxy mode defaultEnable ND proxy.

[Command]

nd proxy mode default

[Purpose]

Enable ND proxy.

[View]

Physical Interface / VLANIF / LAGIF Configuration View

[Notes]

Run command no nd proxy to disable ND proxy.

[Use Cases]

sonic# configure terminal
sonic(config)# interface vlan 100
sonic(config-vlanif-100)# nd proxy mode default

Table 9 SLAAC View

CommandPurpose
show radvDisplay RA configuration.

[Command]

show radv

[Purpose]

Display RA configuration

[View]

Privileged User View

[Use Cases]

sonic# show radv
Enabled: true
Global unicast only: false
+-------------+---------------+----------------+--------------------+-----------+-----------------+------------+---------+-------------------------+
| Interface | Prefix | Managed_Flag | Otherconfig_Flag | OffLink | No-autonomous | Link_MTU | RDNSS | Route | Preference |
+=============+===============+================+====================+===========+=================+============+=========+=========================+
| vlan11 | | on | | | | | | |
+-------------+---------------+----------------+--------------------+-----------+-----------------+------------+---------+-------------------------+
| 0/52 | 2000:101::/64 | on | on | on | on | 1900 | 2000::1 | 2000:101::10/128 | high |
+-------------+---------------+----------------+--------------------+-----------+-----------------+------------+---------+-------------------------+

Table 10 SLAAC Config

CommandPurpose
radv enableEnable RA notification.
radv dns-server X:X::X:XConfigure DNS information for RA notification.
radv link-mtu mtuConfigure the MTU of the link for RA notification.
radv prefix X:X::X:X/MConfigure prefix information for RA notification.
radv route-information X:X::X:X/M [preference{low|high|medium}]Configure route information for RA notification.
radv managed-flagSet the managed-flag to on.
radv other-config-flagSet the other-config-flag to on.
radv offlinkSet the flag of on-link to off.
radv no-autonomousSet the flag of autonomous to off.
radv ra-interval MaxRtrAdvInterval MinRtrAdvIntervalConfigure the maximum and minimum time interval between two RA notifications

[Command]

radv enable

[Purpose]

Enable RA notification.

[View]

Global Configuration View

[Notes]

Run command radv commit to take effect. Run command no radv enable to disable RA notification.

[Use Cases]

sonic# configure
sonic(config)# radv enable
Please enter 'radv commit' to take effect
sonic(config)# radv commit

[Command]

radv dns-server X:X::X:X

[Purpose]

Configure DNS information for RA notification.

[Parameters]

ParameterDescription
X:X::X:XIPv6 address of DNS server.

[View]

Physical Interface / Sub-interface/ VLANIF / LAGIF Configuration View

[Notes]

Run command radv commit to take effect. Run command no radv dns-server X:X::X:X to remove the configuration.

[Use Cases]

sonic# configure
sonic(config)# interface ethernet 0/52
sonic(config-if-0/52)# radv dns-server 2002::2
Please enter 'radv commit' to take effect
sonic(config-if-0/52)# radv commit

[Command]

radv link-mtu mtu

[Purpose]

Configure the MTU of the link for RA notification

[Parameters]

ParameterDescription
mtuSet link-mtu, the default value is 9216.

[View]

Physical Interface / Sub-interface/ VLANIF / LAGIF Configuration View

[Notes]

Run command radv commit to take effect. Run command no radv link-mtu to remove the configuration.

[Use Cases]

sonic# configure
sonic(config)# interface ethernet 0/52
sonic(config-if-0/52)# radv link-mtu 1500
Please enter 'radv commit' to take effect
sonic (config-if-0/52)# radv commit
sonic(config-if-0/52)#

[Command]

radv prefix X:X::X:X/M

[Purpose]

Configure prefix information for RA notification.

[Parameters]

ParameterDescription
X:X::X:X/MNetwork prefix for RA notifications

[View]

Physical Interface / Sub-interface/ VLANIF / LAGIF Configuration View

[Notes]

When RA notification is enabled, you are required to set the prefix information, or the interface will not send RA messages. Run command radv commit to take effect. Run command no radv prefix X:X::X:X/M to remove the configuration.

[Use Cases]

sonic# configure
sonic(config)# interface ethernet 0/52
sonic(config-if-0/52)# radv prefix 3001::/64
Please enter 'radv commit' to take effect
sonic(config-if-0/52)# radv commit

radv route-information X:X::X:X/M[preference{low|high|medium}]

Section titled “radv route-information X:X::X:X/M[preference{low|high|medium}]”

[Command]

radv route-information X:X::X:X/M[preference{low|high|medium}]

[Purpose]

Configure route information for RA notification

[Parameters]

ParameterDescription
X:X::X:X/MThe network segment of RA’s routing announcement

[View]

Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

Run command radv commit to take effect Run command no radv route-information X:X::X:X/M to remove the configuration.

[Use Cases]

sonic# configure
sonic(config)# interface ethernet 0/52
sonic(config-if-0/52)# radv route-information 3001:1::/64 preference low
Please enter 'radv commit' to take effect
sonic(config-if-0/52)# radv commit

[Command]

radv managed-flag

[Purpose]

Set the managed-flag to on(default is off)

[View]

Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

Run command radv commit to take effect. Run command no radv managed-flag to revert it to off.

[Use Cases]

sonic# configure
sonic(config)# interface ethernet 0/52
sonic(config-if-0/52)# radv managed-flag
Please enter 'radv commit' to take effect
sonic(config-if-0/52)# radv commit

[Command]

radv other-config-flag

[Purpose]

Set the other-config-flag to on (default is off).

[View]

Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

Run command radv commit to take effect. Run command no radv other-config-flag to revert it to off.

[Use Cases]

sonic# configure
sonic(config)# interface ethernet 0/52
sonic(config-if-0/52)# radv other-config-flag
Please enter 'radv commit' to take effect
sonic(config-if-0/52)# radv commit

[Command]

radv offlink

[Purpose]

Set the flag of on-link to off (default is on).

[View]

Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

Run command radv commit to take effect. Run command no radv offlink to revert it to on.

[Use Cases]

sonic(config)# interface ethernet 0/52
sonic(config-if-0/52)# radv offlink
Please enter 'radv commit' to take effect
sonic(config-if-0/52)# radv commit

[Command]

radv no-autonomous

[Purpose]

Set the flag of autonomous to off (default is on).

[View]

Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

Run command radv commit to take effect. Run command no radv no-autonomous to revert it to on.

[Use Cases]

sonic(config)# interface ethernet 0/52
sonic(config-if-0/52)# radv no-autonomous
Please enter 'radv commit' to take effect
sonic(config-if-0/52)# radv commit

radv ra-interval MaxRtrAdvInterval MinRtrAdvInterval

Section titled “radv ra-interval MaxRtrAdvInterval MinRtrAdvInterval”

[Command]

radv ra-interval MaxRtrAdvInterval MinRtrAdvInterval

[Purpose]

Configure the maximum and minimum time interval between two RA notifications.

[Parameters]

ParameterDescription
MaxRtrAdvIntervalthe maximum time interval for RA notifications, default value is 600, unit: seconds
MinRtrAdvIntervalthe minimum time interval for RA notifications, default value is 600, unit: seconds

[View]

Physical Interface / Sub-interface / VLANIF / LAGIF Configuration View

[Notes]

Run command radv commit to take effect. Run command no radv ra-interval to set back to default value.

[Use Cases]

sonic# configure
sonic(config)# interface ethernet 0/40
sonic(config-if-0/40)# radv ra-interval 50 25
Please enter 'radv commit' to take effect
sonic(config-if-0/40)# radv commit