Wired Intelligent Edge (Campus Switching and Routing)

Reply
Highlighted
Frequent Contributor II

duplicate ipv4 in vsf stack

Hi,

 

i'm preparing a stack replacement.  I created a three member vsf stack using 2930F switches.  For migration purposes, one port is trunked to the old to-be-migrated stack.

 

All works well, except one thing...  I'm getting duplicate ipv4 entries in the logs :

 

W 10/18/19 13:12:34 02581 ip: ST1-CMDR: IPv4: Duplicate IPv4 address
172.30.254.26 is detected on port 1/48 in VLAN 1254 with a MAC
address of 001c7f-626d88

 

The strange thing is ... i'm sure there is no duplicate ipv4. 

When mirroring a port and having a look with wireshark i see (gw is here a Checkpoint fw 172.30.254.254) :

 

Checkpoint -> Aruba arp who has 172.30.254.26, tell 172.30.254.254

Aruba -> Checkpoint arp 172.30.254.26 is at 38:21:c7:b2:7c:8a

Checkpoint -> Aruba arp 172.30.254.26 is at 38:21:c7:b2:7c:8a

 

After that i immediately see a syslog packet announcing the duplicate ipv4 address.

 

As we see, the mac address which is supposed to have the duplicate ip is the Checkpoint fw.  Which is actually responding that the ip belongs to another mac address?

 

VSF-DMZ# show arp

IP ARP table

IP Address MAC Address Type Port
--------------- ----------------- ------- ----
172.30.254.254 00:1c:7f:62:6d:88 dynamic 1/48

 

MVP Expert

Re: duplicate ipv4 in vsf stack

There is no virtual IP address on your firewall ?




PowerArubaSW: Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP... More info


PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...) More info


PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)


PowerArubaIAP: Powershell Module to use Aruba Instant AP




ACMP 6.4 / ACMX #107 / ACCP 6.5
Frequent Contributor II

Re: duplicate ipv4 in vsf stack

There is a virtual ip, but it's not 172.30.254.26.

Regular Contributor I

Re: duplicate ipv4 in vsf stack

Did you configure ip arp probing on your aruba switch?



- - - - Aruba ACCX #748, ACDX #758, ACMP, ACEAP | HPE Master ASE - - - -
- - - - - - - Feel free to give kudos or accept as a solution! - - - - - - - - -
Frequent Contributor II

Re: duplicate ipv4 in vsf stack

No, actually it's a very basic setup...

 

; JL260A Configuration Editor; Created on release #WC.16.10.0001
; Ver #14:27.6f.f8.1d.9b.3f.bf.bb.ef.7c.59.fc.6b.fb.9f.fc.ff.ff.37.ef:04
hostname "Aruba-2930F-48G-4SFP"
module 1 type jl260a
ip default-gateway 172.30.254.254
snmp-server community "public" unrestricted
no lldp run
vlan 1
   name "DEFAULT_VLAN"
   no untagged 48
   untagged 1-47,49-52
   no ip address
   disable layer3
   exit
vlan 1254
   name "VLAN1254"
   untagged 48
   ip address 172.30.254.26 255.255.255.0
   exit
primary-vlan 1254
activate software-update disable
activate provision disable
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: