Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Example: Configuring Proxy ARP on an EX Series Switch

 

You can configure proxy Address Resolution Protocol (ARP) on your EX Series switch to enable the switch to respond to ARP queries for network addresses by offering its own MAC address. With proxy ARP enabled, the switch captures and routes traffic to the intended destination.

This example shows how to configure proxy ARP on an access switch:

Requirements

This example uses the following hardware and software components:

  • One EX Series switch

  • Junos OS Release 10.0 or later for EX Series switches

Overview and Topology

This example shows the configuration of proxy ARP on an interface of an EX Series switch using restricted mode. In restricted mode, the switch does not act as a proxy for hosts on the same subnet.

The topology for this example consists of one EX Series switch. When a host wants to communicate with a host that is not already in its ARP table, it broadcasts an ARP request for the MAC address of the destination host:

  • When proxy ARP is not enabled, a host that shares the same IP address replies directly to the ARP request, providing its MAC address, and future transmissions are sent directly to the destination host MAC address.

  • When proxy ARP is enabled, the switch responds to ARP requests, providing the switch’s MAC address—even when the destination IP address is the same as the source IP address. Thus, communications must be sent through the switch and then routed through the switch to the appropriate destination.

Configuration

To configure proxy ARP, perform the following tasks:

CLI Quick Configuration

To quickly configure proxy ARP on an interface, copy the following command and paste it into the switch terminal window:

[edit]

set interfaces ge-0/0/3 unit 0 proxy-arp restricted

Step-by-Step Procedure

You configure proxy ARP on individual interfaces.

  1. To configure proxy ARP on an interface:
    [edit interfaces]

    user@switch# set ge-0/0/3 unit 0 proxy-arp restricted
    Best Practice

    We recommend that you configure proxy ARP in restricted mode. In restricted mode, the switch does not act as a proxy if the source and target IP addresses are on the same subnet. If you use unrestricted mode, disable gratuitous ARP requests on the interface to avoid a situation wherein the switch’s response to a gratuitous ARP request appears to the host to be an indication of an IP conflict.

    [edit interfaces]

    user@switch# set ge-0/0/3 no-gratuitous-arp-request

Results

Display the results of the configuration:

Verification

To verify that the switch is sending proxy ARP messages, perform these tasks:

Verifying That the Switch Is Sending Proxy ARP Messages

Purpose

Verify that the switch is sending proxy ARP messages.

Action

List the system statistics for ARP messages:

Meaning

The statistics show that two proxy ARP requests were received. The unrestricted proxy requests not proxied and restricted proxy requests not proxied fields indicate that all the unproxied ARP requests received have been proxied by the switch.