One way arp?
Bookmark this page:
 Yahoo!
 Google
 Windows Live
 del.icio.us
 digg
 Netscape
|
|
|||||||||||||||||||
|
Posted by Andrew Gideon on July 24, 2008, 12:42 pm
Please log in for more thread options I've a network that involves multiple VLANs, so there is a lot of VLAN trunking going on. Up until now, this hasn't been a problem. But I'm now in a situation where two sets of systems are having a very asymmetric behavior. One set cannot get the MAC addresses for IPs in the other set. The other set can get the MAC addresses for IPs in the first set. If a machine in the other set proactively connects to a machine in the first set, then that machine now has the MAC address and can connect back to the machine in the other set. So ARP requests appear to work only in one direction. These machines are connected by a chain of switches speaking over 802.1q trunk ports. What could I possibly have done to cause this behavior? I wouldn't even know how to recreate this if I wanted to! Thanks... Andrew | |||||||||||||||||||
|
Posted by Trendkill on July 24, 2008, 2:30 pm
Please log in for more thread options > other set. =A0The other set can get the MAC addresses for IPs in the firs=
t
> set.
=A0I
> > If a machine in the other set proactively connects to a machine in the > first set, then that machine now has the MAC address and can connect back > to the machine in the other set. > > So ARP requests appear to work only in one direction. =A0 > > These machines are connected by a chain of switches speaking over 802.1q > trunk ports. =A0What could I possibly have done to cause this behavior? = > wouldn't even know how to recreate this if I wanted to!
> > Thanks... > > =A0 =A0 =A0 =A0 Andrew Do you have a subnet mask issue? If the first set only had say a /25 as their mask, then they would arp for their gateway for say a .130 address. If however they were arped FOR, they should respond with their mac. I presume that all of these machines are in the same vlan/ subnet? Are the 'groups' all on two different or specific switches, or its a logical group off of multiple devices w/ no rhyme or reason? | |||||||||||||||||||
|
Posted by Andrew Gideon on July 24, 2008, 5:11 pm
Please log in for more thread options
> Do you have a subnet mask issue?
No. > I presume that all of these machines are in the same vlan/ subnet?
There is actually a chain of switches. The first switch into which some were connected. The second switch which sits between the first and third. And the third switch, into which some others were connected. The problem was always between systems connected between switches one and three. However, I found that someone had blocked ethernet broadcast packets on a piece of equipment, typically invisible to me, between switches one and two. Broadcasts one way were permitted; the other way were blocked. I had them remove the block, and all is working perfectly. Thanks... Andrew | |||||||||||||||||||
> trunking going on. =A0Up until now, this hasn't been a problem.
>
> But I'm now in a situation where two sets of systems are having a very
> asymmetric behavior. =A0One set cannot get the MAC addresses for IPs in t=