Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Static ARP entry

Hey all,

A customer has a network that looks like the attached diagram.

Their Sidewinder firewalls are set up in active-active mode for load-balancing and redundancy. On the Inside router's config, I noticed this line:

arp 10.52.0.4 00XX.b3XX.bcXX ARPA

Where 10.52.0.4 is the Virtual IP of the firewall cluster, and 00XX.b3XX.bcXX is the MAC address of the firewalls virtual adapter.

Can anyone tell me why that command is there, how does it help, or what does it do?

Thanks,

SM

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Bronze

Re: Static ARP entry

Perhaps they had an issue where the Sidewinder FWs weren't advertising the MAC addresses correctly or it wasn't populating in the router's arp table.

This process is done dynamically and seldom is done statically in routers.

I've seen it more often implemented in switches for security purposes but it doesn't scale very well for large amount of host devices.

1 REPLY
Hall of Fame Super Bronze

Re: Static ARP entry

Perhaps they had an issue where the Sidewinder FWs weren't advertising the MAC addresses correctly or it wasn't populating in the router's arp table.

This process is done dynamically and seldom is done statically in routers.

I've seen it more often implemented in switches for security purposes but it doesn't scale very well for large amount of host devices.

107
Views
0
Helpful
1
Replies