M and MSM Series
cancel
Showing results for 
Search instead for 
Did you mean: 

MSM430 - constantly sends ARP gratuitous packets

 
Highlighted
DSV12
Frequent Advisor

MSM430 - constantly sends ARP gratuitous packets

Hi, all!

We started the deployment of a wireless network based on MSM765zl controller and MSM430 AP's. Firmware version latest at this moment (6.0.1). Now only runs two first AP's and one constantly sends ARP gratuitous packets (request to own IP) with rate ~5-8 packs/sec. Why is this happening and how to fix that?

 

TIA,

DSV

4 REPLIES 4
Highlighted
DSV12
Frequent Advisor

Re: MSM430 - constantly sends ARP gratuitous packets


@DSV12 wrote:

Now only runs two first AP's and one constantly sends ARP gratuitous packets (request to own IP) with rate ~5-8 packs/sec.

Very interesting continuation: after switching on the third AP, it started sending ARP gratuitous packets. And AP2 cease to send ARP after few minutes. If I turn off AP3 then AP2 begin to send ARP gratuitous packets again. Seems that ARP packets continuously sends only last discovered (and turned on) AP. 
Highlighted
MSMenthousiast
Frequent Advisor

Re: MSM430 - constantly sends ARP gratuitous packets

I guess you are using the Intrusion Detection System? If so, then it is normal behavior.
Highlighted
Z273
Frequent Advisor

Re: MSM430 - constantly sends ARP gratuitous packets

IDS is sending ARP gratuitous to detect rogueAP.

 

One AP is elected to send those ARP over the LAN, APs which have clients associated will bridge those ARP to the wifi.

 

If a rogueAP is connected to your LAN and there is client associated, this AP also floods ARP to the air, those ARP will be seen by legit APs and the bssid of the rogueAP is compared against a list of "legit" AP.

 

Hope that is clear.

 

To disable those ARP, sadly you have to disable IDS.

 

Maybe the rate at which those ARP are sent should be configurable.

Highlighted
Arimo
Respected Contributor

Re: MSM430 - constantly sends ARP gratuitous packets

One thing to add.

 

If you want to use 6.x FW, I'd recommend going to 6.2 or contacting support for 6.0.1.3-Sr1. Check the release notes for fix list.

 

Controller release notes:

https://h10145.www1.hp.com/downloads/SoftwareReleases.aspx?ProductNumber=J9694A

 

AP FW release notes:

https://h10145.www1.hp.com/downloads/SoftwareReleases.aspx?ProductNumber=J9651A


HTH,

Arimo
HPE Networking Engineer