Hello,
running a network with 3850 switches in access layer with dhcp snooping an ip device tracking, we wanted to add arp ionspection for specific vlans.
Finally stopped arp inspection rollout because of this issue:
| 6519: Apr 12 14:05:25.265: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/0019.99c3.4c83/10.0.172.147/14:05:24 CET Thu Apr 12 2018]) |
| 6520: Apr 12 14:05:25.265: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/0019.99c3.4cfe/10.0.162.38/14:05:24 CET Thu Apr 12 2018]) |
| 6521: Apr 12 14:05:25.265: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/0019.99bf.1e88/10.0.167.10/14:05:24 CET Thu Apr 12 2018]) |
| 6522: Apr 12 14:05:25.265: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/0019.99bf.f3c3/10.0.162.119/14:05:24 CET Thu Apr 12 2018]) |
| 6523: Apr 12 14:05:25.265: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/0019.99be.b790/10.0.162.16/14:05:24 CET Thu Apr 12 2018]) |
| 6524: Apr 12 14:05:26.266: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/38af.d7a7.062e/10.0.165.89/14:05:25 CET Thu Apr 12 2018]) |
| 6525: Apr 12 14:05:26.266: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/0019.99be.bbb1/10.0.166.241/14:05:25 CET Thu Apr 12 2018]) |
| 6526: Apr 12 14:05:26.266: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/0019.99c3.4c15/10.0.163.3/14:05:25 CET Thu Apr 12 2018]) |
| 6527: Apr 12 14:05:26.266: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/0019.99be.bea0/10.0.170.28/14:05:25 CET Thu Apr 12 2018]) |
| 6528: Apr 12 14:05:26.266: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/0019.99be.b83f/10.0.163.97/14:05:25 CET Thu Apr 12 2018]) |
|
6529: Apr 12 14:05:27.265: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Po1, vlan 160.([042a.e21b.6b20/10.0.9.254/0019.99c3.4cfe/10.0.162.38/14:05:25 CET Thu Apr 12 2018])
The 10.0.9.254 is ip device trackings source address. It looks like arp inspection interferes with ip device tracking. Anybody else facing this? Any clues?
Regards
Herb
|
