We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x

FA0 on 1801 cisco router under attack

Medium Priority
570 Views
Last Modified: 2012-05-06
Hi Guys,
Traffic on FA0 is growing exponentially, which I don t know the reason.

The only thing i know is that when the traffic overwhelm the router it will just died, the only thing that can bring it  back is to connect to the console and clear the arp table.

Please help, what can I do to resolve this problem, as you can see I have up to 20 legitimate ip addresses on that result.

THE 172.xx.xx.xx ARE SOME OTHER SUBNET ON THIS NETWORK, i can see the reason why they appear here

#sh arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  10.108.0.3              -   0023.04af.dbca  ARPA   FastEthernet0
Internet  10.108.0.50             0   Incomplete      ARPA
Internet  62.148.179.180          0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  64.208.86.69            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  65.242.27.34            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  74.125.79.100           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  74.125.79.113           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  80.157.169.171          0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  83.244.207.67           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  86.53.218.115           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  87.82.51.91             0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  87.82.51.92             0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  87.86.92.92             0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  89.167.138.243          0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  168.75.68.97            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.17.180.25           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.17.180.159          0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.19.244.86           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.1.1              0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.1.82             0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.1.120            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.1.124            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.1.134            0   0007.0e18.80f9  ARPA   FastEthernet0
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  172.25.1.156            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.1.173            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.1.179            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.1.181            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.1.212            0   001c.f62f.f959  ARPA   FastEthernet0
Internet  172.25.1.253            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.12.69            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.19.10            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.35.2             0   001c.f62f.f959  ARPA   FastEthernet0
Internet  172.25.50.73            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.53.10            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.63.130           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.73.2             0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.74.2             0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.103.2            0   001c.f62f.f959  ARPA   FastEthernet0
Internet  172.25.104.2            0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.109.144          0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.111.198          0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.114.20           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.114.61           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.114.84           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.115.17           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.119.130          0   0007.0e18.80f9  ARPA   FastEthernet0
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  172.25.120.1            -   0023.04af.dbca  ARPA   Vlan1
Internet  172.25.120.2            1   001e.c9e9.dc8d  ARPA   Vlan1
Internet  172.25.120.4            1   0024.50c7.b540  ARPA   Vlan1
Internet  172.25.120.6            1   0023.0425.0e26  ARPA   Vlan1
Internet  172.25.120.20           1   0015.c50b.b601  ARPA   Vlan1
Internet  172.25.120.22           1   001c.234e.3d12  ARPA   Vlan1
Internet  172.25.120.23           0   0018.8bbd.dc1d  ARPA   Vlan1
Internet  172.25.120.25           1   0021.9b89.099a  ARPA   Vlan1
Internet  172.25.120.28           1   001c.233e.0f9d  ARPA   Vlan1
Internet  172.25.120.29           0   0018.de67.ec20  ARPA   Vlan1
Internet  172.25.120.55           0   Incomplete      ARPA
Internet  172.25.120.56           1   001f.3a4c.1b48  ARPA   Vlan1
Internet  172.25.120.57           0   001c.230a.09fc  ARPA   Vlan1
Internet  172.25.133.216          1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.135.2            1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.135.130          1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.137.36           1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.147.2            1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.147.6            1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.176.2            1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.177.2            1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.177.40           1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.177.46           1   0007.0e18.80f9  ARPA   FastEthernet0
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  172.25.177.47           1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.177.156          1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.209.2            1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.214.29           1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.220.80           1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.25.222.55           1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.27.9.251            1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.27.15.157           0   0007.0e18.80f9  ARPA   FastEthernet0
Internet  172.27.32.93            1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  192.168.4.12            -   0023.04af.dbca  ARPA   Vlan3
Internet  194.72.6.57             1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  194.73.82.242           1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  194.126.131.100         1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  195.173.72.123          1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  195.173.72.124          1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  203.48.199.230          1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  212.58.251.89           1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  212.58.253.67           1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  213.199.149.166         1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  216.52.117.151          1   0007.0e18.80f9  ARPA   FastEthernet0
Internet  216.231.195.129         1   0007.0e18.80f9  ARPA   FastEthernet0


Thanks for the anticipated response.
Comment
Watch Question

You should create an access-list:

access-list 10
permit 172.0.0.0 0.255.255.255
deny any log  - to see which IP's are denied

and apply this access-list inbound on the interfaces that you need (ex: F0/0, vlan 1...)

router(config-if)#ip access-group 10 in

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
On interface FA 0

do ...

no ip redirects
no ip proxy-arp


Author

Commented:
Thanks ionut_mir, put access-list manage to stop some of the traffic, and at least allow the network to be statble, another thing thing i included is that i add keepalive.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.