cancel
Showing results for 
Search instead for 
Did you mean: 

[Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Here to help

[Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Update with detailed information.

 

  • Many Macbooks in the network keeps broadcast them as Gateway MAC that causes other Windows clients on the network could not access network.

  • So far, only Windows clients received bad ARP.

  • Macbooks, Mobile (iOS/Android) have not faced this problem.

  • On the network, we do setup dhcp snooping (Meraki at both layer 2 and layer 3 and wireless)

  • I have checked the Macbooks that broadcast ARP, but could not find anything special on them

  • This is a wireless network with client isolation setup.

2019-03-14 16_18_43-Window.png

2019-03-15 09_14_17-Slack - UNIS Hanoi.png

any input appreciated!

 

15 REPLIES 15
Kind of a big deal

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Sounds like your DHCP server handing out the gateway's IP address to clients? Can you check the IP pool used by the DHCP server for that VLAN and ensure that it doesn't include the gateway address.

Here to help

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Yes, we have Gateway address on the DHCP pool.

Edit: The GW Address is excluded from the DHCP pool. It's weird as the problem only happens with Windows.

Mac, iPad, Android ... are fine.

Kind of a big deal

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Well strictly speaking I believe clients should do an ARP request for the IP address a DHCP server proposes before they actually start using it to avoid duplicate IP addresses. But maybe this sometimes fails and maybe the bevavior differs between OSes. Either way, your DHCP address pool shouldn't include addresses that are statically assigned so you should rectify that.

Here to help

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Edit: My bad, I misunderstood.

I excluded the GW IP from the DHCP Pool already, so I don't think DHCP is not the cause...

Kind of a big deal

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Some devices must be using the gateway's address for some reason. Do you know the devices behind those MAC addresses to check their configuration if that is indeed the case?

 

You could also use these instructions to try and locate them:

https://documentation.meraki.com/MX/DHCP/Troubleshooting_DHCP_Conflicts#Client_IP_Conflicts

 

There could also be a rogue DHCP server on the network, the switch should detect it and show it in Switch > DHCP servers & ARP.

Highlighted
Kind of a big deal

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

I have a couple of thoughts.

 

  • Any chance there is more than one DHCP server on this network (by accident)?
  • Any chance you have a layer 3 router (not the default gateway) attached to this network and it is doing proxy arp?
  • Any chance Windows Internet Connection Sharing is enabled on some machines?  This causes Windows to run a DHCP server and returns the client machine itself as the gateway (and in ARP replies)?

 

 

Here to help

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

We have DHCP policy that blocks rogue DHCP servers by default.

On this SSID, we setup client isolation as well.

Wireshark showing that many Macbooks doing arp sniffing, however, when I look at these Macbooks, I don't see any abnormal..

 

2019-03-15 09_14_17-Slack - UNIS Hanoi.png

Kind of a big deal

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

When you execute ifconfig in terminal on these MacBooks, does the address show up on one of the interfaces?

Here to help

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

No, the Mac only shows it's actual IP. 

I think this is a similar case: https://mailman.nanog.org/pipermail/nanog/2019-March/100081.html 

Conversationalist

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Hi @chuyendang,

I have the same issue with you.
Did you solved the issue?

Here to help

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Hi, No, not yet. Few other people having the same issue.

Conversationalist

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Hi @chuyendang,

 

I opened a ticket with Meraki support.

He advise change to NAT mode ( - currently in Bridge mode ). But I cannot change to NAT mode because of our policy.

My colleague try to disable connectivity in Sleep mode to prevent this issue.

Could you add my skype for further discuss: thangphan205

 

Regards,

Thang

Here to help

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Other guys mention that disabling Wake on LAN could fix the problem. However, we cannot do this as we don't manage the device. Meraki should fix the problem at their end (though they implemented ARP proxy - https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Broadcast_Suppression_and_Control...

 

You can check some information here: https://www.reddit.com/r/Cisco/comments/b6eiur/cisco_3802i_waps_change_capwap_gateway_due_to/

Building a reputation

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Has the DHCP server the correct router address in the Scope Options?

 

Bildschirmfoto 2019-04-23 um 10.24.47.png

 

 

And if you have two DHCP-servers, is the standby server correctly replicated? I had issues when the primary DHCP- server didn´t replicate changes to the backup DHCP server.

 


https://www.ravensburger.com
https://www.ravensburger.us
https://www.brio.com
https://www.thinkfun.com
Here to help

Re: [Help] Windows client receiving incorrect MAC address of Gateway in the ARP table

Hi, 

Yes, the DHCP settings are correct.

Most of Macbooks broadcast ARP when they are in sleep mode, I ran  pmset -a disablesleep 1 to disable wake on Lan on a test machine and the problem have not happened with that Mac.

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Points Contest
Join us for a month-long contest with heaps of swag to win!

Learn More ›