Wired Intelligent Edge (Campus Switching and Routing)

Frequent Contributor II

duplicate ipv4 in vsf stack



i'm preparing a stack replacement.  I created a three member vsf stack using 2930F switches.  For migration purposes, one port is trunked to the old to-be-migrated stack.


All works well, except one thing...  I'm getting duplicate ipv4 entries in the logs :


W 10/18/19 13:12:34 02581 ip: ST1-CMDR: IPv4: Duplicate IPv4 address is detected on port 1/48 in VLAN 1254 with a MAC
address of 001c7f-626d88


The strange thing is ... i'm sure there is no duplicate ipv4. 

When mirroring a port and having a look with wireshark i see (gw is here a Checkpoint fw :


Checkpoint -> Aruba arp who has, tell

Aruba -> Checkpoint arp is at 38:21:c7:b2:7c:8a

Checkpoint -> Aruba arp is at 38:21:c7:b2:7c:8a


After that i immediately see a syslog packet announcing the duplicate ipv4 address.


As we see, the mac address which is supposed to have the duplicate ip is the Checkpoint fw.  Which is actually responding that the ip belongs to another mac address?


VSF-DMZ# show arp

IP ARP table

IP Address MAC Address Type Port
--------------- ----------------- ------- ---- 00:1c:7f:62:6d:88 dynamic 1/48


MVP Expert

Re: duplicate ipv4 in vsf stack

There is no virtual IP address on your firewall ?

PowerArubaSW: Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP... More info

PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...) More info

PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)

PowerArubaIAP: Powershell Module to use Aruba Instant AP

ACMP 6.4 / ACMX #107 / ACCP 6.5
Frequent Contributor II

Re: duplicate ipv4 in vsf stack

There is a virtual ip, but it's not

Regular Contributor I

Re: duplicate ipv4 in vsf stack

Did you configure ip arp probing on your aruba switch?

- - - - Aruba ACCX #748, ACDX #758, ACMP, ACEAP | HPE Master ASE - - - -
- - - - - - - Feel free to give kudos or accept as a solution! - - - - - - - - -
Frequent Contributor II

Re: duplicate ipv4 in vsf stack

No, actually it's a very basic setup...


; JL260A Configuration Editor; Created on release #WC.16.10.0001
; Ver #14:27.6f.f8.1d.9b.3f.bf.bb.ef.7c.59.fc.6b.fb.9f.fc.ff.ff.37.ef:04
hostname "Aruba-2930F-48G-4SFP"
module 1 type jl260a
ip default-gateway
snmp-server community "public" unrestricted
no lldp run
vlan 1
   name "DEFAULT_VLAN"
   no untagged 48
   untagged 1-47,49-52
   no ip address
   disable layer3
vlan 1254
   name "VLAN1254"
   untagged 48
   ip address
primary-vlan 1254
activate software-update disable
activate provision disable
Search Airheads
Showing results for 
Search instead for 
Did you mean: