Install guide

Software Release 2.6.4 33
Software Release 2.6.4
C613-10404-00 REV A
To specify arp, use the commands:
enable firewall policy=name [debug={all|arp|http|packet|
pkt|process|proxy|smtp}]
[other-parameters...]
disable firewall policy=name
[debug={all|arp|http|packet|
pkt|process|proxy|smtp}]
[other-parameters...]
A switch that is also acting as a NAT device will now respond to ARP requests
for any of its global IP addresses.
A new command, show firewall arp, displays information about IP addresses
specified in Firewall NAT configurations for which ARP responses from the
switch may be required. To display this information, use the command:
show firewall arp [policy=name]
The policy parameter specifies a firewall policy and displays IP addresses for
NAT configurations with that policy. If this parameter is not specified, IP
addresses are displayed for all policies.
An example output and the parameter descriptions for the show firewall arp
are shown below.
Figure 6: Example output from the show firewall arp command
IP ARP Interfaces NAT Type Int Gbl Int Rule
(range) Policy
--------------------------------------------------------------------------------
172.20.8.50 Public Int based eth0-0 eth1-0 -
Office
172.20.8.57 All Public Rule eth0-1 - 1
-172.20.8.62 LAN
--------------------------------------------------------------------------------
Table 10: Parameters in the output of the show firewall arp command
Parameter Meaning
IP (range) An IP address or range for which the switch may be required to
send ARP responses.
Policy The name of the policy whose NAT configuration the IP address
(range) belongs to.
ARP Interfaces Interfaces in the policy on which ARP requests are permitted:
Public - ARP requests are permitted on the public interface
specified by the Gbl Int parameter
All Public - ARP requests are permitted on all of the policy's public
interfaces
Private - ARP requests are permitted on the private interface
specified by the Int parameter
All Private - ARP requests are permitted on all of the policy's
private interfaces
An address in an ARP request must match the subnet of the
interface on which the ARP request is received.