SRX

last person joined: 2 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  KERN_ARP_ADDR_CHANGE log messages every 13 to 15 seconds

    Posted 06-17-2015 13:24

     KERN_ARP_ADDR_CHANGE: arp info overwritten for 172.24.80.190 from e8:8d:28:58:33:6f to 00:24:9b:04:86:2f

    KERN_ARP_ADDR_CHANGE: arp info overwritten for 172.24.80.190 from 00:24:9b:04:86:2f to e8:8d:28:58:33:6f

     KERN_ARP_ADDR_CHANGE: arp info overwritten for 172.24.80.190 from e8:8d:28:58:33:6f to 00:24:9b:04:86:2f

    KERN_ARP_ADDR_CHANGE: arp info overwritten for 172.24.80.190 from 00:24:9b:04:86:2f to e8:8d:28:58:33:6f

     

    We are seeing the messages above on our srx 240 firewall logs every 13 - 15 seconds. We have located both Machines by MAC Address and only one is 172.24.80.190. Anyone know what might be happening here? The Arp info keeps going back and forth.

     

    Thanks in Advance



  • 2.  RE: KERN_ARP_ADDR_CHANGE log messages every 13 to 15 seconds
    Best Answer

    Posted 06-17-2015 14:15

    We believe we have solved the issue by rebooting an Apple Time Capsule with built in network switch. It was one of the devices that kept broadcasting its MAC as the wrong IP.

     

    Since rebooting we have not seen a log entry with a KERN_ARP... message for 10 minutes. We would have seen around 100 entries by now prior to the reboot.

     



  • 3.  RE: KERN_ARP_ADDR_CHANGE log messages every 13 to 15 seconds

     
    Posted 06-17-2015 14:19
    Do you have dhcp on your Network ? The ip keeps changing from one mac to an other. If one device is configured static and the other gets an ip from dhcp you will see this happening.

    I would suggest checking dhcp server and both devices. Also I suggest disconnecting one or both from the network and see if the ARP then Ages out.

    The problem is somewhere within your Network or in one of the two devices