Got it

ARP detects IP conflict

Created: Mar 1, 2021 07:40:50Latest reply: Mar 5, 2021 02:57:53 1998 20 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hello All,


As i am getting below logs  on my AC6605,


ARP/4/ARP_IPCONFLICT_TRAP:OID 1.3.6.1.4.1.2011.5.25.123.2.6 ARP detects IP conflict. (IP address=10.120.1.1,

Local interface=GigabitEthernet0/0/24, Local MAC=0000-5e00-0102, Local vlan=2, Local CE vlan=0, Receive interface=Wlan-Dbss14, Receive MAC=1802-ae6d-841d, Receive vlan=2, Receive CE vlan=0, IP conflict type=Remote IP conflict).


Also in this 10.120.1.1 is my virtual IP and 0000-5e00-0102 is My Virtual MAC address.

Gateway for all WIFI users. Please provide solution for this.

Featured Answers

Recommended answer

DDSN
Admin Created Mar 1, 2021 07:59:44

Hi ankush,
If this alarm is generated, conflicting IP addresses exist on the network. If the conflict is not eliminated in a timely manner, route flapping may occur, user services may be interrupted, or traffic may be interrupted.
Please try to change the IP address, you can refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100169994&id=EN-US_ALARMREF_0176885708&lang=en
I hope it helps!
View more
  • x
  • convention:

ankush
ankush Created Mar 1, 2021 08:28:40 (0) (0)
Hello DDSN,

I already read this documents, But how can we eliminate the conflict in network. Please help.  
DDSN
DDSN Reply ankush  Created Mar 1, 2021 08:29:42 (0) (0)
Have you changed the conflicting IP address?  
ankush
ankush Reply DDSN  Created Mar 1, 2021 08:36:04 (0) (0)
i don't know how to change it.  
DDSN
DDSN Reply ankush  Created Mar 1, 2021 08:39:12 (0) (0)
Is 10.120.1.1 a virtual IP address for VRRP? Or something else?  
ankush
ankush Reply DDSN  Created Mar 1, 2021 08:46:12 (0) (0)
Yes its virtual IP for VRRP.  
DDSN
DDSN Reply ankush  Created Mar 1, 2021 08:56:46 (0) (0)
In VLANIF interface view.
First, you can use the undo vrrp vrid virtual-ip command to delete the virtual IP address of a VRRP group.
Then use vrrp vrid virtual-ip to configure the virtual IP address.
You can refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100169994&id=EN-US_CLIREF_0176922267&lang=en
I hope it helps!  
ankush
ankush Reply DDSN  Created Mar 1, 2021 09:08:00 (0) (0)
But VRRP for WIFI user are configured on my core switch and the and default route is configured in AC6605 pointed towards gateway of all the WIFI user are 10.120.1.1.
So, if i follow your procedure the network will get hampered.  
All Answers
DDSN
DDSN Admin Created Mar 1, 2021 07:45:49

Hi ankush,
Please wait patiently. Our engineers are looking for answers to your questions.
View more
  • x
  • convention:

DDSN
DDSN Admin Created Mar 1, 2021 07:59:44

Hi ankush,
If this alarm is generated, conflicting IP addresses exist on the network. If the conflict is not eliminated in a timely manner, route flapping may occur, user services may be interrupted, or traffic may be interrupted.
Please try to change the IP address, you can refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100169994&id=EN-US_ALARMREF_0176885708&lang=en
I hope it helps!
View more
  • x
  • convention:

ankush
ankush Created Mar 1, 2021 08:28:40 (0) (0)
Hello DDSN,

I already read this documents, But how can we eliminate the conflict in network. Please help.  
DDSN
DDSN Reply ankush  Created Mar 1, 2021 08:29:42 (0) (0)
Have you changed the conflicting IP address?  
ankush
ankush Reply DDSN  Created Mar 1, 2021 08:36:04 (0) (0)
i don't know how to change it.  
DDSN
DDSN Reply ankush  Created Mar 1, 2021 08:39:12 (0) (0)
Is 10.120.1.1 a virtual IP address for VRRP? Or something else?  
ankush
ankush Reply DDSN  Created Mar 1, 2021 08:46:12 (0) (0)
Yes its virtual IP for VRRP.  
DDSN
DDSN Reply ankush  Created Mar 1, 2021 08:56:46 (0) (0)
In VLANIF interface view.
First, you can use the undo vrrp vrid virtual-ip command to delete the virtual IP address of a VRRP group.
Then use vrrp vrid virtual-ip to configure the virtual IP address.
You can refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100169994&id=EN-US_CLIREF_0176922267&lang=en
I hope it helps!  
ankush
ankush Reply DDSN  Created Mar 1, 2021 09:08:00 (0) (0)
But VRRP for WIFI user are configured on my core switch and the and default route is configured in AC6605 pointed towards gateway of all the WIFI user are 10.120.1.1.
So, if i follow your procedure the network will get hampered.  
DDSN
DDSN Admin Created Mar 1, 2021 09:13:38

Which device is connected to WLAN-Dbss14? Can you operate this device and change the conflicting IP address?
View more
  • x
  • convention:

Posted by DDSN at 2021-03-01 09:13 Which device is connected to WLAN-Dbss14? Can you operate this device and change the conflicting IP ...
no i cannot operate the end device.

also what if i add 10.120.1.1 IP GUI
View more
  • x
  • convention:

DDSN
DDSN Created Mar 4, 2021 07:14:51 (0) (0)
Your picture cannot be opened. Please upload another picture. Note: Do not upload images in the form of links.  
Good
View more
  • x
  • convention:

ARP detects IP conflict-3819335-1
View more
  • x
  • convention:

Posted by DDSN at 2021-03-01 09:13 Which device is connected to WLAN-Dbss14? Can you operate this device and change the conflicting IP ...

please check now.

@DDSN please check now

View more
  • x
  • convention:

DDSN
DDSN Created Mar 4, 2021 12:13:04 (0) (0)
Please try adding 10.120.1.1 to the " not allocated" option. Click Refresh.  
ankush
ankush Reply DDSN  Created Mar 4, 2021 12:30:08 (0) (0)
@DDSN as 10.120.1.1 is my gateway for 10.120.1.0/24 network and default route is configured on AC pointed towards 10.120.1.1 IP.
So, it will not hampered the network.? if i add the 10.120.1.1 in "IP not allocated".  
DDSN
DDSN Reply ankush  Created Mar 4, 2021 13:51:06 (0) (0)
Have you tried to configure an IP address on the same network segment as 10.120.1.1 as a virtual IP address?  
ankush
ankush Reply DDSN  Created Mar 4, 2021 13:54:32 (0) (0)
sorry!! I don't understand what you want to say.?  
Posted by ankush at 2021-03-04 09:56 @DDSN please check now

Hi,
The IP address that conflicts with the gatewayshould be set by the user.

You can use the ip source check user-bind enable command to enable IP packet check. After the command is configured, only the IP addresses allocated by the DHCP server can be used to access the network.

And the arp learning strict force-enable is used to enable strict ARP learning on the interface. After the command is configured, the device learns only ARP entries for ARP Reply packets in response to ARP Request packets sent by itself, but does not allow the device to learn the ARP entries for the ARP packets received from other devices. Therefore, if other users privately configure the IP address assigned by dhcp, it will not affect normal users' access to the network.

Configuration Examples:

#
dhcp enable
#
dhcp snooping enable
#
vlan 2
dhcp snooping enable
ip source check user-bind enable  
#
interface Vlanif2
dhcp select interface
arp learning strict force-enable  
#


I hope this helps.

View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.