Drew, this is actually expected behavior, for pretty much every L3 Switch/Router I have seen. Arp resolves ip address to mac address, and mac address (normally) is associated with a single port (per vlan) at any one point in time. If you have Mac addresses moving back and forth, that is generally a bad thing in a switched environment. Traffic has the possibility of being black holed, as it will be forwarded only to the port where the destination mac address is at the instant the switch is ready to forward.<div>
<br></div><div>If you are looking to duplicate the traffic across multiple ports, you need to do a static arp entry, and possibly a static mac entry as well. This will duplicate all packets to that ip/mac combo, and send it to multiple ports. I have generally only seen this in clustering scenarios (like Microsoft Load Balancing), not in VRRP. In normal VRRP, there is still a singular owner of that VRRP VIP at any one point in time, one router that will answer Arp's, thus it should only be learned on one port, not both. If you are seeing it on both, it sounds like there may be a problem there.</div>
<div><br></div><div>WIthout seeing the configs, or more info, those are my thoughts, hope it helps.</div><div><br></div><div>Mike<br><br><div class="gmail_quote">On Sun, Jun 3, 2012 at 5:27 AM, Drew Weaver <span dir="ltr"><<a href="mailto:drew.weaver@thenap.com" target="_blank">drew.weaver@thenap.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I hate to reply to myself but I noticed that even though the switch is running router code and it's IP addresses are all handled via the VE when I do show ARP it is still seeing the arp on the physical ports rather than the VLAN.<br>
<br>
This is pretty unfortunate.<br>
<br>
Thanks,<br>
-Drew<br>
<div class="HOEnZb"><div class="h5"><br>
<br>
-----Original Message-----<br>
From: <a href="mailto:foundry-nsp-bounces@puck.nether.net">foundry-nsp-bounces@puck.nether.net</a> [mailto:<a href="mailto:foundry-nsp-bounces@puck.nether.net">foundry-nsp-bounces@puck.nether.net</a>] On Behalf Of Drew Weaver<br>
Sent: Saturday, June 02, 2012 10:16 AM<br>
To: '<a href="mailto:jeffm@iglou.com">jeffm@iglou.com</a>'; <a href="mailto:foundry-nsp@puck.nether.net">foundry-nsp@puck.nether.net</a><br>
Subject: Re: [f-nsp] Asymmetrical routing on ADX<br>
<br>
That's exactly my stance on this issue.<br>
<br>
It's especially annoying considering that the two physical ports in question are attached to a VLAN/Virtual Ethernet, I don't understand why it matters which physical interface in the VLAN handles the traffic destined for the VE..<br>
<br>
To me that is really broken.<br>
<br>
Thanks,<br>
-Drew<br>
<br>
<br>
-----Original Message-----<br>
From: <a href="mailto:foundry-nsp-bounces@puck.nether.net">foundry-nsp-bounces@puck.nether.net</a> [mailto:<a href="mailto:foundry-nsp-bounces@puck.nether.net">foundry-nsp-bounces@puck.nether.net</a>] On Behalf Of <a href="mailto:jeffm@iglou.com">jeffm@iglou.com</a><br>
Sent: Friday, June 01, 2012 3:08 PM<br>
To: <a href="mailto:foundry-nsp@puck.nether.net">foundry-nsp@puck.nether.net</a><br>
Subject: Re: [f-nsp] Asymmetrical routing on ADX<br>
<br>
On Fri, June 1, 2012 12:25, Drew Weaver wrote:<br>
> Why is asymmetrical routing bad if you have a complete mesh?<br>
<br>
It isn't (even without a complete mesh).<br>
<br>
Asymmetric routing is commonplace and normal, if you need a chokepoint to apply some sort of network policy (load balancing, firewalling, etc.) you need to make sure that you make it a chokepoint both coming and going, and if gear can't handle the next-hop (or even the interface that it uses) may be different for transmitted and received traffic, then bug reports need to be filed.<br>
<br>
<br>
--<br>
Jeff<br>
<br>
_______________________________________________<br>
foundry-nsp mailing list<br>
<a href="mailto:foundry-nsp@puck.nether.net">foundry-nsp@puck.nether.net</a><br>
<a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><br>
<br>
_______________________________________________<br>
foundry-nsp mailing list<br>
<a href="mailto:foundry-nsp@puck.nether.net">foundry-nsp@puck.nether.net</a><br>
<a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><br>
<br>
_______________________________________________<br>
foundry-nsp mailing list<br>
<a href="mailto:foundry-nsp@puck.nether.net">foundry-nsp@puck.nether.net</a><br>
<a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><br>
</div></div></blockquote></div><br></div>