ARP table

Live neighbour cache merged with the configured static entries. Lifetime is temp (expires at the global ARP timeout), static (no expiry, but traffic can overwrite it), or permanent (no expiry, never overwritten). There is no arbitrary per-entry timeout.

Drift detected. One or more managed static ARP entries differ from the live table — a managed MAC changed, was overwritten by traffic, or is missing. The managed rows below show the live state; re-add or delete to reconcile.

Drift state unknown. The managed-vs-live comparison could not be completed{{#DRIFT_REASON}} ({{DRIFT_REASON}}){{/DRIFT_REASON}} — treat the sync state as unverified, not clean.

Showing {{SHOWN}} of {{MATCHED}} matching entries (the live table holds {{TOTAL}} in total). Not all matches are shown — narrow the list with the IP / MAC filter above to find a specific entry.

No ARP entries.

IP address	MAC address	Interface	TTL / expiry	Type (flags)	Actions

Add static ARP entry

Interface ARP

Per-interface ARP mode. Change any rows, then press Save to commit every changed interface at once. The status chip shows the live kernel state; a drift badge means the live flags differ from the saved configuration.

No interfaces found.

Interface	Disable ARP	Static ARP	Action

Global ARP tuning

System-wide ARP sysctls. arptimeout is the lifetime of a temp/dynamic ARP entry. arpdown is how long a failed (incomplete) resolution is held down before retrying.

Populate ARP table

Pick one of this router's connected IPv4 subnets and ping every host in it. Each probe makes the kernel resolve that neighbour, filling in the ARP table on the ARP entries tab — handy after a reboot or to pre-warm the neighbour cache.

No connected private IPv4 subnet between /24 and /30 was found on this router. Larger subnets are too big to sweep (over 256 hosts); for a custom range use Diagnostics → Subnet ping sweep.

Subnet {{#SWEEP_OMITTED_NOTE}}

{{SWEEP_OMITTED}} connected subnet(s) larger than /24 are not listed — too many hosts to sweep.

Sends an ICMP echo to every address in the chosen subnet from this router's address, on private networks only. A /24 is ~254 probes and can take up to ~45 seconds; on a monitored network a sweep may trip IDS or port-security alarms. Use only on networks you operate.