XG Firewall using incorrect IP address

Paul,

in addition: check that you do not have an alias created on the WAN port.

Hi Guys,

Thanks for the reply's.

Let me clear it up, I have now rolled back firmware versions and can see under the Neighbors(ARP-NDP) the offending ip, it wasn't there on the latest firmware.  It is also using port 2 but has a different MAC address, I don't have any aliases on Port 2.  Is there an easy way to delete it?  Clicking on the trashcan doesn't get rid of it.  Also, still not sure where it came from.

Paul,

if you see the IP under neighbour tab, there is another device that is using that ip and not XG. Neighbour ARP-NDP is just a learning protocol.

Check you has that ip on the wan interface.

More info for ARP-NDP here

http://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/concepts/ARPNDP.html

Regards

Thanks for the reply,

Is there anyway I can remove this IP from ARP permanently as it is causing a bit of confusion with some rules on our switch.

XG310_WP02_SFOS 17.5.8 MR-8# arp -n                                             
? (10.172.65.17) at 84:b8:02:21:1b:04 [ether]  on Port2                         
? (10.192.192.1) at dc:f7:19:33:02:42 [ether]  on Port1                         
? (10.172.65.29) at <incomplete>  on Port2                                      
XG310_WP02_SFOS 17.5.8 MR-8#    

it has now completed

Go to advanced shell and run this command:

ip -s -s neigh flush all

I’ve tried that, it comes back again after a reboot.

I’ve tried that, it comes back again after a reboot.

Paul,

can you share a screenshot?

Again, the XG is learning the mac-addresses from the network where it is attached. It is not an XG issue but another device on the network has that IP address.

Check the mac-address that is linked to the IP address that is causing the conflict and check via show mac-addresses on cisco where the host with that mac-address is attached.

Regards