Solved

ARP on behalf

Posted on 2004-09-08
6
312 Views
Last Modified: 2010-04-11
Saw this, wondering what is up with this.

172.25.22.1 ---------> Broadcast     Who has 172.25.42.53? Tell 172.25.42.1



Note that we are running two DHCP scopes here on the same DHCP server.
172.25.22.5-172.25.22.150
172.25.42.5-172.25.42.150
 One physical network, 2 logicals.
Thanks
0
Comment
Question by:dissolved
6 Comments
 

Assisted Solution

by:JMellin
JMellin earned 50 total points
ID: 12005864
As I would guess 172.25.42.1 have made a ARP request for 172.25.42.53. This is intercepted by 172.25.22.1 which is on another subnet but same physical network, ARP is a physical broadcast seen by all regardless of IP network.

Normally this would be ignored by the IP Protocol but perhaps 172.25.22.1 is a router with a sort of proxy-ARP feature.
It will then try to help negotiate mac address information (not route) between hosts on different subnets.

Regards
Johan
0
 

Author Comment

by:dissolved
ID: 12005939
But if its a broadcast, and 172.25.42.0 and 172.25.22.0 are differerent networks, how did 172.25.22.1 see the broadcast???

I found out these two networks are on separate VLANs. Perhaps the router is doing inter-vlan routing. But even then, would it pass broadcasts in between them?
Thanks
0
 
LVL 23

Assisted Solution

by:Tim Holman
Tim Holman earned 50 total points
ID: 12006649
172.25.22.1 ---------> Broadcast     Who has 172.25.42.53? Tell 172.25.42.1


1)  172.25.22.1 looks for 172.25.42.53
2)  Immediately knows this is not on the same subnet, so sends to default router
3)  Default router knows about 172.25.42.x, so issues ARP
4)  172.25.42.x responds to router with MAC address
5)  Router ARP table updated
6)  172.25.22.1 can now talk to 172.25.42.53
0
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

 

Author Comment

by:dissolved
ID: 12006891
default router is 172.25.22.1. I'm thinking 172.25.42.1 is a sub-interface on the e0 of the cisco router (172.25.22.1)
0
 

Author Comment

by:dissolved
ID: 12007010
We are running VLANs and have our router (172.25.22.1) with a sub interface on the e0


172.25.22.1 ---------> Broadcast     Who has 172.25.42.53? Tell 172.25.42.1


1)  172.25.42.1 looks for 172.25.42.53
2)  However, since 172.25.42.1 is a sub-interface, 172.25.22.1 is shown as issuing the ARP request
3)  172.25.42.53 responds to 172.25.22.1 with it's physical address.

is this possible?
0
 
LVL 11

Accepted Solution

by:
PennGwyn earned 400 total points
ID: 12007900
I'm guessing that 172.25.22.1 and 172.25.42.1 are primary and secondary addresses on the same physical interface of the router.

The router wants to talk to 172.25.42.53, so it sends an ARP request.  172.25.42.1 is the router address on that subnet, so that's where the reply should go.

However, because 172.25.22.1 is the router's primary address on that port, it gets filled in as the source of the message.

0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Internet testing device? 5 52
Network adapter for Windows 7 9 56
AD Design Best Practices 6 39
Change to New Domain, carry Wks configs foward? 4 29
Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question