Add manual ARP entries to Secure SD-WAN Engines

You can add manual ARP entries for IPv4 and neighbor discover entries for IPv6 in the Engine Editor.

ARP (Address Resolution Protocol) entries and neighbor discovery entries are normally managed automatically based on the routing configuration. It is not necessary to add manual ARP entries or neighbor discovery entries unless there are problems with the automatic entries, such as devices that do not respond to gratuitous ARP requests, or that impose a significant delay on such operations. The manual ARP entries and neighbor discovery entries are generated by the Secure SD-WAN Engine regardless of the installed policy.

Engines support both static and proxy ARP entries defined with IPv4 and IPv6 addresses. IPS engines, Layer 2 Engines, Master Secure SD-WAN Engines, and Virtual Engines support only static ARP entries defined with IPv4 addresses.

For more details about the product and how to configure features, click Help or press F1.

Steps

  1. Right-click an Secure SD-WAN Engine, then select Edit <element type>.
  2. Browse to Interfaces > ARP Entries.
  3. Click Add ARP Entry.
  4. Configure the settings.
  5. Click Save and Refresh to transfer the configuration to the Secure SD-WAN engine.

Engine Editor > Interfaces > ARP Entries

Use this branch to manually add ARP entries for IPv4 or neighbor discover entries for IPv6.

Option Definition
Type
  • Static — The ARP entry gives the Secure SD-WAN Engine a permanent reference to an IP address/MAC address pair.
  • Proxy — The ARP entry gives the Secure SD-WAN Engine a reference to an IP address/MAC address pair for which the Secure SD-WAN Engine provides proxy ARP. Proxy ARP is possible only for hosts located in networks directly connected to the Secure SD-WAN Engine.
Interface ID The interface on which you want to apply this ARP entry
IP Addresses Enter an IPv4 or IPv6 address.
MAC Address Enter a MAC Address.
Add ARP Entry Adds an ARP entry.
Remove ARP Entry Removes the selected ARP entry.