cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Bookmark
|
Subscribe
|
1972
Views
0
Helpful
1
Replies

why the debug arp output the follow imformation "IP ARP throttled out the ARP Request for 10.170.254.13"

shadowzyh
Level 1
Level 1

In the network,sometimes,I can't ping some servers,the getway is in the switch 4507,if I connect my computer in the vlan what the servers in,I will not ping the getway successful,and the computer can't learn the getway's MAC.In the same time I debug arp in the 4507,the output is :

"Jun 20 07:36:21.225: IP ARP throttled out the ARP Request for 10.170.254.46
Jun 20 07:36:21.225: IP ARP throttled out the ARP Request for 10.170.254.13
Jun 20 07:36:21.227: IP ARP: sent req src 10.170.252.30 b838.6168.3c7f,
                 dst 10.170.252.82 0000.0000.0000 Vlan252"

If I reload the 4507,I could ping the getway ,and the servers.

I think it's ARP attack,the machine who was the question one  is  send a lot of ARP request ,that let the 4507's ARP cache full ,and than overflow. My computer wants to request the getway's MAC ,the message is discard.SO my computer can't ping the getway.

Can someone tell me, am I right? It's very important for me.

and tell me ,how can i do ? I'll wait online.

thank you very very much. 

1 Reply 1

Reza Sharifi
Hall of Fame
Hall of Fame

Have a look at this document for troubleshooting ARP throttled issues

http://www.cisco.com/c/en/us/support/docs/ip/express-forwarding-cef/17812-cef-incomp.html

 

HTH