1-3Static ARP entryA static ARP entry is manually configured and maintained. It cannot get aged or be overwritten by adynamic ARP entry.Using static ARP entries enhances communication security. After a static ARP entry is specified, only aspecific MAC address is associated with the specified IP address. Attack packets cannot modify theIP-to-MAC mapping. Thus, communications between devices are protected.Static ARP entries can be classified into permanent or non-permanent.z A permanent static ARP entry can be directly used to forward packets. When configuring apermanent static ARP entry, you must configure a VLAN and an outbound interface for the entrybesides the IP address and the MAC address.z A non-permanent static ARP entry has only an IP address and a MAC address configured. Itcannot be directly used for forwarding data. If a non-permanent static ARP entry matches an IPpacket to be forwarded, the device sends an ARP request first. If the sender IP and MACaddresses in the received ARP reply are the same as those in the non-permanent static ARP entry,the device adds the interface receiving the ARP reply to the non-permanent static ARP entry. Thenthe entry can be used for forwarding IP packets.Usually ARP dynamically resolves IP addresses to MAC addresses, without manual intervention.Managing ARP EntriesDisplaying ARP EntriesSelect Network > ARP Management from the navigation tree to enter the default ARP Table pageshown in Figure 1-3. All ARP entries are displayed on the page.Figure 1-3 ARP Table configuration page
