topic Re: How to check CP FW ARP age timeout currently? in Firewall and Security Management

How to check CP FW ARP age timeout currently?

Herschel_Liang — Tue, 17 May 2022 03:39:03 GMT

How to check CP FW ARP age timeout currently? Can CP display it as Cisco device?

Address         Age        Hardware Addr   State      Type  Interface
10.4.9.2        00:35:55   0030.7131.abfc  Dynamic    ARPA  MgmtEth0/RP1/CPU0/0
10.4.9.1        00:35:55   0000.0c07.ac24  Dynamic    ARPA  MgmtEth0/RP1/CPU0/0
10.4.9.99       00:49:12   0007.ebea.44d0  Dynamic    ARPA  MgmtEth0/RP1/CPU0/0

Re: How to check CP FW ARP age timeout currently?

G_W_Albrecht — Tue, 17 May 2022 09:34:21 GMT

clish: #show arp table validity-timeout

See sk42182: How to modify the ARP cache timeout value

Re: How to check CP FW ARP age timeout currently?

Herschel_Liang — Tue, 17 May 2022 12:21:24 GMT

No, I do not want to know cache timeout value. I want to know real time ARP age timeout value. default is 60s, but after some seconds, how long does it leave? Ths is my question.

Re: How to check CP FW ARP age timeout currently?

Alex- — Tue, 17 May 2022 13:47:33 GMT

You could try something like that to check values, in Expert mode.

ip -statistics neighbour | awk {'print $1; print $5;print"last used/confirmed/updated"; print $9; print"-----------------"'}

You will get something along the lines of this.

a.a.a.a 00:11:22:33:44:55a last used/confirmed/updated 7/1/7 ----------------- b.b.b.b aa:cc:22:bb:33:cc last used/confirmed/updated 0 ----------------- c.c.c.c ee:55:ff:66:77:ab last used/confirmed/updated 0 ----------------- d.d.d.d 32:25:15:cc:dd:aa last used/confirmed/updated 1310219/0/1310218 -----------------

With real IP and MAC of course.

Re: How to check CP FW ARP age timeout currently?

Herschel_Liang — Tue, 17 May 2022 18:32:54 GMT

Could you please explain which value is age timeout? I do not understand the meaning of the output argument.