Forums before death by AOL, social media and spammers... "We can't have nice things"
|    comp.protocols.tcp-ip    |    TCP and IP network protocols.    |    14,669 messages    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
|    Message 13,924 of 14,669    |
|    Barry Margolin to host@redlorry.co.za    |
|    Re: Full ARP tabel with garbage entries    |
|    30 Jan 13 10:57:23    |
      From: barmar@alum.mit.edu              In article <7978b205-50a1-42b1-af45-4b01e56a9b61@googlegroups.com>,        host@redlorry.co.za wrote:              > Hell All,       >       > I have a strange problem on my network. I have two Huawei Quidway R1760       > routers that are linking our two offices, I and at subnet 192.168.0.0 and       > our satellite office is 192.168.1.0. Problem number one no one knows the       > passwords for the routers.              That's crazy. Go through the routers' password reset procedure.              >       > In November last year I noticed that the ARP table at the B site,       > 192.168.1.0, was full, but the thing is most of the entries were similar       > to       > Inet 192.168.1 .8 00-00-00-00-00-00 Dynamic Enternet0       > Inet 192.168.1 .19 00-00-00-00-00-00 Dynamic Enternet0       > Inet 192.168.1 .3 00-00-00-00-00-00 Dynamic Enternet0       >       > PC's that were on and connected when the router was rebooted had a       > reservation in the ARP table but any new devices that attached to the       > network after the reboot could not get an ARP entry and there for could not       > communicate with the A site.       >       > I traced the fault to most of the PC's at the A site. So I block all of the       > PC's from communication with the b site, except our servers and a few       > printers. The cleared the issues, kind of because I still do not know what       > is causing this issue, but the B site could work.       >       > This morning I saw that the table was full again, I have now found that       > one of the printers is causing the issue. I blocked the printer from       > access the B site and the table cleared up, without a reboot.       >       > Please has any one got any advice on this for me.       >       > Thank you              My guess is that something is doing a network scan, trying to connect to       all the 192.168.1.x addresses. This is filling the ARP cache with all       the addresses. But if the routers can't handle an ARP cache with 254       entries, I think you need to get better routers.              --       Barry Margolin       Arlington, MA              --- SoupGate-Win32 v1.05        * Origin: you cannot sedate... all the things you hate (1:229/2)    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
(c) 1994, bbs@darkrealms.ca