topic Re: ASA ARP issue?? in Network Security https://community.cisco.com/t5/network-security/asa-arp-issue/m-p/1320191#M859174 <HTML><HEAD></HEAD><BODY><P>Do you have static nat statements? The ASA will proxy-arp for anything configured in a static nat.</P></BODY></HTML> Fri, 26 Jun 2009 02:26:00 GMT plumbis 2009-06-26T02:26:00Z ASA ARP issue?? https://community.cisco.com/t5/network-security/asa-arp-issue/m-p/1320189#M859165 <P>ASA's MAC address of the inside interface is populated in the CAM table of the switch it's connected to causing connectivity issues for devices in VLAN252.</P><P></P><P>ASA inside interface:</P><P></P><P> 8: Ext: GigabitEthernet1/1 : address is 001f.6c3d.e287, irq 255</P><P></P><P>Switch CAM table:</P><P></P><P>Internet 10.153.252.111 9 001f.6c3d.e287 ARPA Vlan252</P><P>Internet 10.153.252.110 214 001f.6c3d.e287 ARPA Vlan252</P><P>Internet 10.153.252.109 214 001f.6c3d.e287 ARPA Vlan252</P><P>Internet 10.153.252.108 214 001f.6c3d.e287 ARPA Vlan252</P><P>Internet 10.153.252.107 82 001f.6c3d.e287 ARPA Vlan252</P><P>Internet 10.153.252.106 82 001f.6c3d.e287 ARPA Vlan252</P><P>Internet 10.153.252.105 82 001f.6c3d.e287 ARPA Vlan252</P><P>Internet 10.153.252.104 82 001f.6c3d.e287 ARPA Vlan252</P><P>Internet 10.153.252.103 82 001f.6c3d.e287 ARPA Vlan252</P> Mon, 11 Mar 2019 15:46:41 GMT https://community.cisco.com/t5/network-security/asa-arp-issue/m-p/1320189#M859165 opers13 2019-03-11T15:46:41Z Re: ASA ARP issue?? https://community.cisco.com/t5/network-security/asa-arp-issue/m-p/1320190#M859171 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I'm not sure if my issue I saw is the same as yours but I installed an ASA running 8.0.4 and ran into alot of packet loss on our DMZ. Turned out, the ASA was responding to ARP requests for hosts on the local LAN causing major packet loss my DMZ subnet. I seem to remember the systems affected were all VM's EXS hosts. I had to disable proxy arp on our DMZ ASA interface with "sysopt noproxyarp dmz" to stop the madness.</P><P></P><P>HTH</P></BODY></HTML> Mon, 22 Jun 2009 19:01:10 GMT https://community.cisco.com/t5/network-security/asa-arp-issue/m-p/1320190#M859171 mike-greene 2009-06-22T19:01:10Z Re: ASA ARP issue?? https://community.cisco.com/t5/network-security/asa-arp-issue/m-p/1320191#M859174 <HTML><HEAD></HEAD><BODY><P>Do you have static nat statements? The ASA will proxy-arp for anything configured in a static nat.</P></BODY></HTML> Fri, 26 Jun 2009 02:26:00 GMT https://community.cisco.com/t5/network-security/asa-arp-issue/m-p/1320191#M859174 plumbis 2009-06-26T02:26:00Z