I have a 2106 running 188.8.131.52 code with 6 1131 access points. 4 of those access points are located in our main office and are in our wireless VLAN. I have an IPS sensor monitoring that VLAN and I am seeing this message:
192.168.x.x/0 --> 192.168.x.x/0 N/A ARP Reply-to-Broadcast,NR-7102/0,Time:1192307707,Risk Rating:30,VLAN:x
The address is the one of the access point. Does anyone know why the access point would generate a ARP reply to broadcast with his IP address as the source and destination?