?
Solved

Is frequent ARPing normal?

Posted on 2004-08-11
11
Medium Priority
?
451 Views
Last Modified: 2010-04-08
I have a network where clients randomly drop their internet connection behind a cisco pix 501.   Random clients randomly drop their connection for random periods of time.  I'm not sure yet if it is a switch or the firewall.   I am guessing it is the firewall..  Anyway, I am doing some arp debugging on the pix and i notice it keeps rearping the same clients.. should it be doing this?  It will arp the same clients sometimes 5-10 times in minute.. shouldnt it cache the arp and be done with it?


0
Comment
Question by:Brent92663
  • 6
  • 3
10 Comments
 

Author Comment

by:Brent92663
ID: 11774885
also i as an interesting symptom.. when the clients internet goes down, he can ping the pix.. but not telnet to it..
0
 
LVL 36

Expert Comment

by:grblades
ID: 11775530
Hi Brent92663,
Can you post the PIX configuration and I will have a look to see if there is anything wrong.
0
 

Author Comment

by:Brent92663
ID: 11775546
im not thinking there is a config problem, but maybe instead the interface is going bad..  the config has been in place for months,, and has been fine.
0
Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

 
LVL 36

Expert Comment

by:grblades
ID: 11775659
What is in your 'global' command on the PIX?
One common problem is if you have a range of IP addresses suppled. This uses standard NAT so if you have a renge of 20 IP addresses then 20 machines can simultaneously use the internet at any time. Adding new machines or different user behavious (running MSN for example) could mean there are more than 20 machines trying to gain access.
You normally have a mixed NAT/PAT or just a PAT setup.

The PIX should cache the ARP responses but if it stops getting a response from a machine it might decide to issue another ARP.
0
 

Author Comment

by:Brent92663
ID: 11775894
just a normal old global (outside) 1

we use a global nat for all the clients, and static nats for the servers

0
 
LVL 36

Expert Comment

by:grblades
ID: 11776479
You just have a single IP address listed and not a range?
0
 

Author Comment

by:Brent92663
ID: 11776710
global (outside) 1 interface

so all clients inside that do not have a static nat use the globalnat of the ip address of the external interface
0
 

Author Comment

by:Brent92663
ID: 11777803
well i found the problem.. proxyarp was enabled.. turned it off, and boom, were all good in the hood..
0
 

Author Comment

by:Brent92663
ID: 11816319
Case requested closed
0
 

Accepted Solution

by:
ee_ai_construct earned 0 total points
ID: 11934829
Closed, 500 points refunded.
ee_ai_construct (replacement part #xm34)
Community Support Moderator
0

Featured Post

Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
SQL Database Recovery Software repairs the MDF & NDF Files, corrupted due to hardware related issues or software related errors. Provides preview of recovered database objects and allows saving in either MSSQL, CSV, HTML or XLS format. Ensures recov…

588 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question