ASA syslog message

Answered Question
May 26th, 2008
User Badges:

The firewall syslog message shows "..Received ARP response collision from 10.168.1.254/001d.e6f2.f7c0 on interface Inside. I can not see any documentation for 10.168.1.254/001d.e6f2.f7c0. Any suggestions on how to track the IP/mac address? Thanks

Correct Answer by francisco_1 about 9 years 1 month ago

the link below describes the password recovery procedure for the Cisco Catalyst switches you are using. you will need to Power the switch and bring it to the switch: prompt so yes the password recovery will affect production so i suggest you do it out of work hours


http://www.cisco.com/en/US/products/hw/switches/ps628/products_password_recovery09186a0080094184.shtml

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
saidfrh Mon, 05/26/2008 - 09:52
User Badges:

Do you know why there would be a ARP response collision?

05-26-2008 09:06:55 Local4.Warning 10.168.1.10 May 26 2008 09:10:56: %ASA-4-405001: Received ARP response collision from 10.168.1.254/001d.e6f2.f7c0 on interface Inside

Thanks

Correct Answer

Firstly - what device on your network has the address 10.168.1.254?


Secondly - have you traced the device that has MAC address 001d.e6f2.f7c0


Arp collisions are - interesting, to fully understand why you are seeing them, you need to know the answer to the above questions?

saidfrh Mon, 05/26/2008 - 11:05
User Badges:

Why would the firewall log a ARP response collision? I believe the IP may be associated with Cisco switches: 2 x 2960G and 3560G. We are on one network/subnet. I recently configured a network 2 months ago and forgot where I documented the passwords to the switches and if I assigned IPs to the switches. Any suggestions to password recovery on the switches? Would password recovery procedure on the switches effect production environment? Thanks.

Correct Answer
francisco_1 Mon, 05/26/2008 - 13:16
User Badges:
  • Gold, 750 points or more

the link below describes the password recovery procedure for the Cisco Catalyst switches you are using. you will need to Power the switch and bring it to the switch: prompt so yes the password recovery will affect production so i suggest you do it out of work hours


http://www.cisco.com/en/US/products/hw/switches/ps628/products_password_recovery09186a0080094184.shtml

Actions

This Discussion