State interface in the ARP Table

[reginaldjohnson]

I keep receiving the following msg every 10min.

"Deny inbound UDP from 172.16.30.35/137 to 192.168.1.1/137 on interface inside"

I have discovered the 192.168.1.1 ip is located in my ARP Table with the interface set to STATE.Please help.

[mkharban]

Hi,

You are getting this message because there is no natting done for 192.168.1.1. It looks like the STATE interface has a higher security level than the interface from which 172.16.30.35 is coming.

Hope this helps!

Thanks,

Manish

Cisco TAC