From: George Spahl (georges@xxxxxxxxx)
Date: Wed Oct 04 2000 - 08:07:46 GMT-3
I'm sure you may have already tried this, but it seems like at that rate
(5M/10Weeks is close to one per second) a sniffer on the same wire as the
HSRP might quickly show who is doing all the ARPing, that is if that's the
point in your network where it's actually occuring.
Is there still a statement for "no ip redirects" on the HSRP interfaces?
Just a thought.
George
At 10:23 PM 10/3/00 -0700, Dan_Price@providian.com wrote:
>
>
>Proxy ARP...
>
>It is my understanding that proxy arp, enabled by default, allows a Cisco
>Router
>(be it MSFC, as in this case or 2502)
>to respond with its MAC address when presented with an ARP request for an IP
>address that the router has in its route table.
>
>HOST A ----ENET ----- ROUTER A -------HDLC T1 ------ROUTER B -------ENET
------
>HOST B
>
>Host A (misconfigured or non supported subnet mask) arps on the Router A ENET
>for Host B
>
>without Proxy Arp this goes nowhere, thanks to Proxy ARP the Router A steps in
>and provides HOST A with its MAC to reach HOST B
>
>OK..??..
>
>So now, different routed situation
>
>
>HOST A ----- > HSRP DEF GW ------> MSFC RUNNING 12.07XE2 (times two) ------>
>HDLC HSSI (x3) --------> 7206VXR (12.07T)
>
>On either MSFC (redundant situation) we are seeing 5,000,000 proxy arps for
>about 10 weeks uptime
>
>ARP statistics:
> Rcvd: 17351184 requests, 72877 replies, 81 reverse, 0 other
> Sent: 118076 requests, 5557578 replies (5552437 proxy), 0 reverse
>
>No misconfigured hosts that we can tell at this time.
>
>Wondering if HSRP plays into this at all, sending the Virtual Mac for the
>DEF-GW
>Standby IP??. Same situation regardless of code, RSM or MSFC.
>
>Anyone noticed this one before??
>
>Dan Price
>
>
>
>
>------------------------------------------------------------------------------
>Warning : The information contained in this message may be privileged and
>confidential and protected from disclosure. If the reader of this message is
>not the intended recipient, you are hereby notified that any dissemination,
>distribution or copying of this communication is strictly prohibited. If you
>have received this communication in error, please notify us immediately by
>replying to this message and then delete it from your computer. All e-mail
>sent to this address will be received by the Providian Financial corporate
>e-mail system and is subject to archiving and review by someone other than
>the recipient.
>
>==============================================================================
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:24 GMT-3