Changing your IP address, and the effect it has on ARP caches

Posted on 2004-11-08
Last Modified: 2013-02-25
Say I'm ip address    And I change my IP address to
Will my router still have my MAC address MAPPED to for a few minutes thereafter?

I've noticed that if I change my IP address, then view traffic with a sniffer. I can sometimes see my OLD IP address still doing ARP requests like a ghost (and no, no one was reassigned my old address). The problem fades away after a few minutes (hours?)

Would the "clear arp cache" command remedy this situation?

Question by:dissolved
    LVL 43

    Accepted Solution

    Yes, the entry in the ARP cache is used until it ages out and then the new MAC address is mapped to the IP address when the router does an ARP broadcast.

    Yes, if you use the "clear arp cache" command, it will remove all cached entries immediately and will rebuild the cache.  This will make the change immediate.
    LVL 28

    Assisted Solution

    You can have multiple IPs mapped to a single MAC address. You CANNOT have 1 IP mapped to multiple MAC addresses. You may be seeing arps for the old address because hosts cache DNS info. If hosta thinks that is and then you change it to, then hosta still thinks that servera is at until it's rebooted or you flush the DNS cache on hosta.

    The router can have mutliple IPs on a single MAC, no problem. It wouldn't arp for the old address unless someone was asking for it, such as hosta in the previous example. If you clear the arp cache, it will clear the router table. But hosta may still ask for it and the router will try again. You would see "Incomplete" in the arp table.
    LVL 79

    Assisted Solution

    Absolutely, you have an arp cache that will "hold on" to the old mapping for a period of time, as well as other systems around you will also have arp cache and dns cache and Netbios name caches.

    See this Question, too, where we had the issue of changing out firewalls. New MAC address, same IP address, and the router cache had to be cleared:

    Default arp cache on a Cisco router is something like 4 hours..

    Author Comment

    Thanks fellas

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Join & Write a Comment

    Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
    In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now