I somehow cannot find any information about this “add ARP for leases” feature.
Can anyone please give me a link to some information.
Thank you.
I somehow cannot find any information about this “add ARP for leases” feature.
Can anyone please give me a link to some information.
Thank you.
Are you asking what arp is? You’ll want an understanding of what an arp table is
No, what does it mean to add it to leases
If you enabled this option, and set the interface ARP setting to “reply-only”, it will mean that only DHCP clients will be able to access your network, statically configured IP addresses will not be allowed, except if the admin adds their MAC address to the ARP menu
When you configure the system as Normis explains, the router will no longer populate the ARP table from ARP packets it receives on that interface. The only way that an entry will (automatically) end up in the routers ARP table will be as a result of the DHCP assignment. It adds some security to the network as the router will only ever send IP traffic to the MAC address that was used in the DHCP request. If no DHCP request (and lease issued), no ARP entry.
Setting the interface arp to reply-only will ensure that the router will reply to ARP requests, but it will not populate the ARP table from ARP replies.
@Normis, can we add a feature to turn on this feature when the router is acting as a DHCP relay? I believe currently it only works if the router is the DHCP server and is not a DHCP relay.
Rich
if set how you write, should /ip/settings/arp-timeout be equal to ip/dhcp-server/leases/lease-time or is dhcp-server setting proper arp timeout into router?
ARP timeout is the same as the lease expiration timeout in this case.
Thank you for clarifying this.
One last question, maybe you know this too, if I remove some lease from DHCP is router removing also ARP learned from this DHCP entry?
One last question, maybe you know this too, if I remove some lease from DHCP is router removing also ARP learned from this DHCP entry?
I dodn’t know, but it should be trivial for you to try it and see.
If you enabled this option, and set the interface ARP setting to “reply-only”, it will mean that only DHCP clients will be able to access your network, statically configured IP addresses will not be allowed, except if the admin adds their MAC address to the ARP menu
in mikrotik v7wont work again…