[c-nsp] unwanted "arp reply" traffic at IX

[Michael K. Smith - Adhost]

Hello Daniel:

> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-
> bounces at puck.nether.net] On Behalf Of Daniel Roesen
> Sent: Wednesday, December 12, 2007 4:11 PM
> To: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] unwanted "arp reply" traffic at IX
> 
> On Sun, Nov 18, 2007 at 02:23:57AM +0100, Daniel Roesen wrote:
> > On Sun, Nov 18, 2007 at 12:33:55AM +0100, Daniel Roesen wrote:
> > > Router#sh run | i prox
> > > ip arp proxy disable
> > > Router#sh run int g0/1 | i prox
> > > Router#sh ip int g0/1 | i Prox
> > >   Proxy ARP is enabled
> > >
> > > I've verified that proxy ARP is actually disabled. Just opened a
> > > TAC case for that.
> 
> Actually, Cisco now refuses to fix this. The DDTS ID I got at first was
> wrong too (not even for IOS).
> 
> Cisco's (at least "the developers, tech leads and escalations
> engineers"
> final word is that this behaviour is not a bug but intended behaviour.
> 
> SR #607332831 for anyone who has more weight to cluebat them
> appropriately. I'm giving up.
> 
> Best regards,
> Daniel (shaking head in deep disbelieve how disconnected some vendors
> are from real world users)

We had a similar issue at the Seattle Internet Exchange and a "no ip gratuitous-arps" at the global config level helped significantly. I know it doesn't address your issue above, but it may help in other ways.

Regards,

Mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 474 bytes
Desc: not available
Url : https://puck.nether.net/pipermail/cisco-nsp/attachments/20071212/b1c9a64a/attachment.bin