Buy or Renew
Buy or Renew
Cisco Virtual Engineer generative AI bot now active in Wireless Discussion Forum. Learn more.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
663
Views
0
Helpful
3
Replies

ARP Reply-to-Broadcast

jkeddington_2
Level 1
Level 1

‎10-13-2007 01:16 PM - edited ‎07-03-2021 02:45 PM

I have a 2106 running 4.0.179.0 code with 6 1131 access points. 4 of those access points are located in our main office and are in our wireless VLAN. I have an IPS sensor monitoring that VLAN and I am seeing this message:

192.168.x.x/0 --> 192.168.x.x/0 N/A ARP Reply-to-Broadcast,NR-7102/0,Time:1192307707,Risk Rating:30,VLAN:x

The address is the one of the access point. Does anyone know why the access point would generate a ARP reply to broadcast with his IP address as the source and destination?

Thank you,

James

Labels:
0 Helpful
3 Replies 3

ivillegas
Level 6
Level 6

‎10-18-2007 02:24 PM

As far as I know access point doesnt broadcast itself for any of the service. This probabaly indicates a security threat . Check for this.

0 Helpful

jkeddington_2
Level 1
Level 1
In response to ivillegas

‎10-18-2007 07:49 PM

That is what I was afraid of. Thanks for the info.

0 Helpful

p-allen
Level 1
Level 1

‎11-25-2007 09:17 AM

we are seeing the same thing with the arp reply to broadcast in MARS and some of our cisco AP's. Does anybody have any ideas?

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card