The firewall syslog message shows "..Received ARP response collision from 10.168.1.254/001d.e6f2.f7c0 on interface Inside. I can not see any documentation for 10.168.1.254/001d.e6f2.f7c0. Any suggestions on how to track the IP/mac address? Thanks
the link below describes the password recovery procedure for the Cisco Catalyst switches you are using. you will need to Power the switch and bring it to the switch: prompt so yes the password recovery will affect production so i suggest you do it out of work hours
Firstly - what device on your network has the address 10.168.1.254?
Secondly - have you traced the device that has MAC address 001d.e6f2.f7c0
Arp collisions are - interesting, to fully understand why you are seeing them, you need to know the answer to the above questions?