Solved

Is frequent ARPing normal?

Posted on 2004-08-11
11
430 Views
Last Modified: 2010-04-08
I have a network where clients randomly drop their internet connection behind a cisco pix 501.   Random clients randomly drop their connection for random periods of time.  I'm not sure yet if it is a switch or the firewall.   I am guessing it is the firewall..  Anyway, I am doing some arp debugging on the pix and i notice it keeps rearping the same clients.. should it be doing this?  It will arp the same clients sometimes 5-10 times in minute.. shouldnt it cache the arp and be done with it?


0
Comment
Question by:Brent92663
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 3
11 Comments
 

Author Comment

by:Brent92663
ID: 11774885
also i as an interesting symptom.. when the clients internet goes down, he can ping the pix.. but not telnet to it..
0
 
LVL 36

Expert Comment

by:grblades
ID: 11775530
Hi Brent92663,
Can you post the PIX configuration and I will have a look to see if there is anything wrong.
0
 

Author Comment

by:Brent92663
ID: 11775546
im not thinking there is a config problem, but maybe instead the interface is going bad..  the config has been in place for months,, and has been fine.
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 
LVL 36

Expert Comment

by:grblades
ID: 11775659
What is in your 'global' command on the PIX?
One common problem is if you have a range of IP addresses suppled. This uses standard NAT so if you have a renge of 20 IP addresses then 20 machines can simultaneously use the internet at any time. Adding new machines or different user behavious (running MSN for example) could mean there are more than 20 machines trying to gain access.
You normally have a mixed NAT/PAT or just a PAT setup.

The PIX should cache the ARP responses but if it stops getting a response from a machine it might decide to issue another ARP.
0
 

Author Comment

by:Brent92663
ID: 11775894
just a normal old global (outside) 1

we use a global nat for all the clients, and static nats for the servers

0
 
LVL 36

Expert Comment

by:grblades
ID: 11776479
You just have a single IP address listed and not a range?
0
 

Author Comment

by:Brent92663
ID: 11776710
global (outside) 1 interface

so all clients inside that do not have a static nat use the globalnat of the ip address of the external interface
0
 

Author Comment

by:Brent92663
ID: 11777803
well i found the problem.. proxyarp was enabled.. turned it off, and boom, were all good in the hood..
0
 

Author Comment

by:Brent92663
ID: 11816319
Case requested closed
0
 

Accepted Solution

by:
ee_ai_construct earned 0 total points
ID: 11934829
Closed, 500 points refunded.
ee_ai_construct (replacement part #xm34)
Community Support Moderator
0

Featured Post

Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as the high-speed power of the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …
Suggested Courses

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question