[j-nsp] DA rejects

[Paul Stewart]

Thanks...

No, this is a new customer connection (new customer all together).  The fix 
seems to be to drop the port physically and reconnect (either our side or 
their side) making this really seem like a FW issue on customer side.

When I randomly checked a dozen or so ports similar to the this customer's 
service from us, there are zero DA rejects - everything is just generally 
clean across the board.  I've tried to tell the customer to contact 
Sonicwall for support and to troubleshoot but they are not listening - so 
I'm just looking to make sure I'm not going to have any egg in my face :)

Paul


-----Original Message----- 
From: Richard A Steenbergen
Sent: Sunday, December 18, 2011 4:25 PM
To: Paul Stewart
Cc: Humair Ali ; juniper-nsp at puck.nether.net
Subject: Re: [j-nsp] DA rejects

On Sat, Dec 17, 2011 at 08:11:39AM -0500, Paul Stewart wrote:
>
> It has "magically" started working again for the customer, which is
> quite strange.  Again, very confident this is a CPE issue but wanted
> to ensure I understood how JunOS will look at ARP output like above
> (make sure there is no confusion) :)

Erm, did you move the customer to a new endpoint on your side? If so,
you were probably receiving DA Rejects because they had your old router
MAC address stuck in their arp cache, and it "magically fixed itself"
when their ARP cache timed out and it re-learned the gateway mac.

-- 
Richard A Steenbergen <ras at e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)