Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show arp

date_range 15-Jul-24

Syntax

content_copy zoom_out_map
show arp 
<expiration-time>
<hostname host-name>
<interface interface-name>
<logical-system logical-system-name>
<no-resolve>
<reference-count count>
<tenant name>
<state state>
<vpn vpn-name>

Description

Display all entries in the Address Resolution Protocol (ARP) table. To display entries for a particular logical system only, first enter the set cli logical-system logical-system-name command, and then enter the show arp command.

To force the output of this command to show the IP address by the hostname of each device, also configure the force-show-arp-resolve statement at the [edit system services subscriber-management overrides] hierarchy.

Note:

Starting with Junos OS Release 14.2, the following enhancements have been made to the output of the show arp interfaces command:

  • For integrated routing and bridging (IRB) interfaces, in the output of the show arp command, the IRB interface name is displayed under the Interface field of the output and the Layer 2 interface identifier is specified in square brackets following the IRB name. Until Release 14.1 and earlier, only the layer 2 interface name and not the IRB name was displayed.

  • Starting with release 14.2, if you do not specify a subinterface or a logical unit of the interface with the show arp interface interface-name command, an error message is shown. Until Release 14.1 and earlier, if you did not specify the subinterface for a physical interface, the system considered the supplied command to be for subinterface 0 and displayed the output. For example, if you entered ge-2/2/5, it was processed by the system as ge-2/2/5.0.

  • When IRB interfaces are configured and if you attempt to specify an interface name that is not configured on the system, an error message is displayed stating the particular interface is not defined on the system. Until release 14.1 and earlier, unrelated and incorrect entries were displayed even for interface names that did not exist.

  • Starting with Release 14.2, you can enter the show arp interface command with the IRB name and retrieve the statistical details for the IRB interface. This functionality was not available previously. However, you could previously obtain the ARP details of an IRB interface that had a Layer 2 interface configured.

Note:

Starting with Junos OS Release 16.1, show arp no-resolve command does not display the underlying ifl information if enhanced-convergence statement at [edit irb unit unit-number hierarchy level and enhanced-ip statement at [edit chassis network-services] hierarchy level is configured for the destination interface IRB.

Options

none

Display the entries in the ARP table.

expiration-time

(Optional) Display the amount of time, in seconds, until each ARP entry is set to expire.

hostname host-name

(Optional) Display the hostname.

interface interface-name

(Optional) Display information about ARP for the specified logical interface

logical-system logical-system-name

(Optional) Display ARP entries for the specified logical system; only available on the main router context.

no-resolve

(Optional) Do not attempt to determine the hostname that corresponds to the IP address.

reference-count count

(Optional) Display the next-hop reference count.

state state

(Optional) Display the next-hop current state.

tenant name

(Optional) Display the ARP entries for the specified tenant. Only available in the main router context.

vpn vpn-name

(Optional) Display entries in the ARP table for the specified virtual private network’s (VPN) routing table.

Note:
  • The vpn option displays only entries for non-subscriber interfaces. You must omit this option if you want to view ARP entries for subscriber interfaces.

  • The show arp vpn vpn-name no-resolve command does not display entries for subscriber interfaces in the non-default routing-instance, that is when the subscriber interface is coming up in the non-default routing-instance.

Required Privilege Level

view

Output Fields

Table 1 describes the output fields for the show arp command. Output fields are listed in the approximate order in which they appear.

Table 1: show arp Output Fields

Field Name

Field Description

MAC Address

Media access control (MAC) address that corresponds to the IP address.

Address

IP address that corresponds to the hostname.

Name

Hostname.

Interface

Interface name.

Flags

(no-resolve option only) Indicates how mappings between IP and MAC addresses are defined:

  • permanent—Static mapping. The ARP entry never times out.

  • published—The next hop is published. This flag tells the host to respond to ARP request and ARP response packets. When you see this flag, the device acts as an ARP server and responds to host name requests even if the host address is not its own.

  • gateway—The device rewrites the source MAC address with the interface MAC address. You will see this flag when the device uses the interface MAC address for the Layer 2 header.

  • remote—The ARP entry is installed by a process (for example, the l2ald process), not the kernel.

  • None—Dynamic mapping.

TTE

(expiration-time option only) Amount of time, in seconds, until ARP entry is set to expire.

Sample Output

show arp

content_copy zoom_out_map
user@host> show arp 
MAC Address       Address         Name                     Interface
00:e0:81:22:fd:74 192.168.64.10   firewall.my.net          fxp0.0
00:04:5a:65:78:e1 192.168.65.13   lab.my net               fxp0.0

show arp no-resolve

content_copy zoom_out_map
user@host> show arp no-resolve 
MAC Address       Address         Interface     Flags
00:90:69:96:00:01 10.10.45.5      fe-0/0/1.0    none
00:00:00:00:00:01 200.200.200.1   fe-0/0/0.0    permanent published
00:00:00:00:00:02 200.200.200.2   fe-0/0/0.0    permanent
00:90:69:91:b0:00 200.200.200.3   fe-0/0/0.0    none
Total entries: 4

show arp no-resolve

content_copy zoom_out_map
user@host> show arp no-resolve (QFX Series) 

The command is displaying the MAC and MAC-IP routes are programmed over the .local interface.

content_copy zoom_out_map
MAC Address       Address         Interface                Flags
00:00:10:00:11:00 10.0.1.1        irb.100 [.local..5]      permanent remote
00:00:10:00:22:00 10.0.1.2        irb.100 [.local..5]      permanent remote
00:00:10:00:33:00 10.0.1.3        irb.100 [.local..5]      permanent remote
00:00:10:00:44:00 10.0.1.4        irb.100 [.local..5]      permanent remote
00:00:10:11:22:00 10.0.1.12       irb.100 [.local..5]      permanent remote
00:00:10:11:33:00 10.0.1.13       irb.100 [.local..5]      permanent remote
00:00:10:11:44:00 10.0.1.14       irb.100 [.local..5]      permanent remote
00:00:10:11:66:00 10.0.1.16       irb.100 [.local..5]      permanent remote
40:00:10:11:11:00 10.0.1.254      irb.100                  permanent published gateway
00:00:10:00:11:01 10.0.2.1        irb.200 [.local..5]      permanent remote
00:00:10:00:22:01 10.0.2.2        irb.200 [.local..5]      permanent remote
00:00:10:00:33:01 10.0.2.3        irb.200 [.local..5]      permanent remote
00:00:10:00:44:01 10.0.2.4        irb.200 [.local..5]      permanent remote
00:00:10:11:22:01 10.0.2.12       irb.200 [.local..5]      permanent remote
00:00:10:11:33:01 10.0.2.13       irb.200 [.local..5]      permanent remote
00:00:10:11:44:01 10.0.2.14       irb.200 [.local..5]      permanent remote
00:00:10:11:66:01 10.0.2.16       irb.200 [.local..5]      permanent remote
Total entries: 26

command-name

content_copy zoom_out_map
user@host> show arp no-resolve

The command displaying the underlying l2 ifl information when enhanced-convergence statement and enhanced-ip statement is not configured.

content_copy zoom_out_map
show arp no-resolve
MAC Address       Address         Interface         Flags
02:01:00:00:00:05 10.0.0.5        em1.0                    none
00:00:5e:00:01:1b 91.91.91.50     irb.0[xe-2/1/0.0]        none  >>> underlying l2 ifl associated
02:01:00:00:00:05 128.0.0.5       em1.0                    none
02:01:00:00:00:05 128.0.0.6       em1.0                    none
02:00:00:00:00:12 128.0.0.18      em0.0                    none
00:26:88:6a:c6:80 192.168.237.126 fxp0.0                   none
Total entries: 6

The command not displaying the underlying l2 ifl information when enhanced-convergence statement and enhanced-ip statement is configured.

content_copy zoom_out_map
MAC Address       Address         Interface         Flags
02:01:00:00:00:05 10.0.0.5        em1.0                    none
00:00:5e:00:01:1b 91.91.91.50     irb.0                    none  >>> underlying l2 ifl association is removed.
02:01:00:00:00:05 128.0.0.5       em1.0                    none
02:01:00:00:00:05 128.0.0.6       em1.0                    none
02:00:00:00:00:12 128.0.0.18      em0.0                    none
00:26:88:6a:c6:80 192.168.237.126 fxp0.0                   none
Total entries: 6

show arp expiration-time

content_copy zoom_out_map
user@host> show arp expiration-time   
MAC Address       Address         Name                 Interface     Flags TTE
00:a0:a5:12:3e:d4 10.0.0.5        10.0.0.5                  fxp1.0 none 
00:e0:81:22:fd:74 192.168.64.10   supernova.englab.juniper. fxp0.0 none 1491
00:30:48:84:03:56 192.168.65.46   kgb.englab.juniper.net    fxp0.0 none 1279
00:03:ba:12:f7:5e 192.168.65.226  nmssun1-eri0.englab.junip fxp0.0 none 452
00:90:69:8e:b0:fc 192.168.71.254  stonewall-ge-200.englab.j fxp0.0 none 1421
Total entries: 5

Release Information

Command introduced before Junos OS Release 7.4.

expiration-time option added in Junos OS Release 8.1.

logical-system and vpn options added in Junos OS Release 10.1.

reference-count, tenant, and state options added in Junos OS Release 18.3.

external-footer-nav