I've been looking at a client's network which has been suffering a LAN problem and it seems like their CSS 11500 has been sending thousands of ARP requests every second. This was due to a server, configured as a service, which had changed to a new IP address so it was no longer replying to ARP for the old IP.
Although the problem is now solved (by updating the service to use the correct server IP), I was wondering why it would be sending thousands of ARP requests in a second. I was under the impression that a cisco device rate-limited arp requests to 1 every 2 seconds? Also if the server went down and was unable to reply to ARP, would this ARP flood re-occur?
