Meraki

Community

About anonadmin

Re: Random IPsec/Arp issue?

by in Security & SD-WAN
‎Jan 9 2023 1:30 PM
‎Jan 9 2023 1:30 PM
Yes i believe you are correct. The fact that it's arp'ing for the destination IP of the actual device which is on a different network would seem to indicate that it believes it's self to be on the same network. Will have them check their SM and GW, thanks! ... View more

Re: Random IPsec/Arp issue?

by in Security & SD-WAN
‎Jan 9 2023 12:54 PM
‎Jan 9 2023 12:54 PM
Hey Phil , thanks for the response. This device is an NVR, so it's possible there is some kinda ACL turned on. Unfortunately, i have no access to the device and am working with counter parts in India who do, but they are all asleep at the moment.   I did have that thought but the ARP request threw me off. I suppose even if there was some kinda ACL blocking communication on the device it would still attempt to perform an ARP look up after it received an ICMP request ? ... View more

Random IPsec/Arp issue?

by in Security & SD-WAN
‎Jan 9 2023 12:22 PM
‎Jan 9 2023 12:22 PM
Communication from (192.168.100.253) fails to device (192.168.20.99) over IPSec tunnel.   Other devices (192.168.20.10) respond no problem.   Cisco ISR4331 to MX67   Packet capture shows the ICMP request makes it to 192.168.20.99   Device 192.168.20.99, sends out ARP broadcast for 192.168.100.253   MX gateway does not respond back with ARP reply, as it does not seem to have 192.168.100.253 in it's ARP table.   Thus no ICMP reply is generated from device 192.168.20.99.   What on earth is going on here? Why is this an issue for this device, but not other devices on the same subnet?   Thanks!   ... View more
Labels:
© 2024 Cisco Systems, Inc.