10-03-2020 01:03 AM - edited 10-03-2020 01:04 AM
Hello!
Can anybody help me to interpret these arp messages?
sh ip arp vrf CLIENTS-WAN
Protocol Address Age (min) Hardware Addr Type Interface
Internet 10.218.114.1 - d0d0.fdad.f302 ARPA GigabitEthernet0/0/2.73
Internet 10.218.114.20 0 Incomplete ARPA
*Oct 3 09:27:13: IP ARP req filtered src 192.168.0.101 70f0.9617.13e0, dst 6.0.0.1 0000.0000.0000 wrong cable, interface GigabitEthernet0/0/2.73
*Oct 3 09:27:13: IP ARP req filtered src 192.168.0.101 70f0.9617.14d8, dst 6.0.0.1 0000.0000.0000 wrong cable, interface GigabitEthernet0/0/2.73
*Oct 3 09:27:13: IP ARP req filtered src 192.168.0.101 70f0.9617.10bc, dst 6.0.0.1 0000.0000.0000 wrong cable, interface GigabitEthernet0/0/2.73
*Oct 3 09:27:14: IP ARP req filtered src 192.168.0.101 70f0.9616.88e0, dst 6.0.0.1 0000.0000.0000 wrong cable, interface GigabitEthernet0/0/2.73
*Oct 3 09:27:21: IP ARP: sent req src 10.218.114.1 d0d0.fdad.f302,
dst 10.218.114.20 0000.0000.0000 GigabitEthernet0/0/2.73
*Oct 3 09:27:22: IP ARP: sent req src 118.991.1102.97 d0d0.fdad.f302,
dst xx.x1.102.100 0000.0000.0000 GigabitEthernet0/0/2.75
Konfig:
interface GigabitEthernet0/0/2.73
encapsulation dot1Q 73 native
vrf forwarding CLIENTS-WAN
ip address 10.218.114.1 255.255.255.0
ip helper-address xx
ip helper-address xx
ip helper-address xx
Switch
I see mac
73 70f0.9616.88e0 DYNAMIC Tw1/0/1
73 70f0.9617.10bc DYNAMIC Tw1/0/5
73 70f0.9617.13e0 DYNAMIC Tw1/0/3
73 70f0.9617.1440 DYNAMIC Tw1/0/6
73 70f0.9617.14d8 DYNAMIC Tw1/0/2
73 70f0.9617.16a8 DYNAMIC Tw1/0/4
interface TwoGigabitEthernet1/0/1
description --AP
switchport access vlan 73
switchport trunk native vlan 73
switchport trunk allowed vlan 73,74
switchport mode trunk
spanning-tree portfast trunk
end
Regards
-S
10-03-2020 01:46 AM
Hello,
The log entry means: the source IP address of the ARP request is not in the same subnet range as that of the receiving interface, GigabitEthernet0/0/2.73.
Make sure both connecting interfaces share the same subnet.
10-04-2020 06:07 AM
To supply a little detail to supplement the correct suggestion by @Georg Pauwen let us look at this log entry
*Oct 3 09:27:13: IP ARP req filtered src 192.168.0.101 70f0.9617.13e0, dst 6.0.0.1 0000.0000.0000 wrong cable, interface GigabitEthernet0/0/2.73
- note that the this arp request was received on Gig0/0/2.73
- note that the source address of the arp request is 192.168.0.101
- but interface Gig0/0/2.73 has IP address 10.218.114.1
- the log message identifies this as "wrong cable" which is perhaps a bit misleading but what it means is that something is connected and is not addressed in the correct subnet.
We also see this entry
*Oct 3 09:27:21: IP ARP: sent req src 10.218.114.1 d0d0.fdad.f302,
dst 10.218.114.20 0000.0000.0000 GigabitEthernet0/0/2.73
which indicates that your switch is attempting to communicate with a device that should be connected in vlan 73 but is not receiving any response to its arp request. We do not have enough information to be able to determine whether this is related to the request from an invalid source or not. Can you tell us anything about the device at 10.218.114.20
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide