[j-nsp] EX4200 ARP Issue

Heath Jones hj1980 at gmail.com
Mon Sep 27 16:44:43 EDT 2010


> This morning users started complaining that there ips were flapping, they would work for 5 minutes then stop working for 5 minutes. What seemed to fix this issue was clearing the ARP table. This switch has all customer vlans and routes customer subnets.

Did it occur once, or you had to had to keep clearing it?

> Another thing i noticed was...
> 00:06:5b:f1:f0:72 "public ip here"            vlan.13      none
> 00:06:5b:f1:f0:72 "public ip here"            vlan.13      none
> 00:06:5b:f1:f0:72 "public ip here"        vlan.13      none
> 00:06:5b:f1:f0:72 "public ip here"            vlan.13      none
> 00:06:5b:f1:f0:72 "public ip here"            vlan.13      none
> 00:06:5b:f1:f0:71 "public ip here"            vlan.13      none
> 00:06:5b:f1:f0:72 "public ip here"            vlan.13      none
> 00:06:5b:f1:f0:71 "public ip here"            vlan.13      none
> One customer has a firewall, and its outside interface has all the above ips assigned to it. Its outside interface has the :71 mac address. For some reason :72 is showing up and that is the firewalls inside interface. During this time, the ips attached to the :71 interface were working, the :72 were not. When i cleared the ARP, all ips had :71 again.

Are both sides of this firewall plugged into this switch, or part of a
segment attached to this switch?
Mind reposting with the ip's or atleast anonymised properly? - at the
moment we can't tell if they are all the same, different or what...



More information about the juniper-nsp mailing list