Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Patrick150781
Explorer

How to troubleshoot gratuitous ARP ?

Dear CheckMates,

I need to troubleshoot gratuitous ARP since on router does not get as soon as a cluster failover happend in an activ/passiv cluster without vMAC enabled.

Is is possible and will this command work?

tcpdump -i bond0.xxxx broadcast and arp and arp[6:2] == 2

Or does anyone of you has another usfull command?

Gateway is running with R81.10 Take 79

 

BR

Patrick

0 Kudos
3 Replies
the_rock
Legend
Legend

You can even do tcpdump -i if_name arp...example tcpdump -i eth2 arp

Also, cppcap -f "arp" works too.

This website my colleague made ages ago is really good reference for multiple vendors:

https://tcpdump101.com/#

Cheers.

0 Kudos
_Val_
Admin
Admin

If you have a suspicion G-ARPs are not sent, it is best to snoop them on the receiving end, not on your cluster member. 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

The following discussion may also be helpful for you:

https://community.checkpoint.com/t5/Security-Gateways/How-to-send-G-ARP-manually/td-p/69895

CCSM R77/R80/ELITE
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 08:00 AM (CDT)

    South US: HTTPS Inspection Best Practices

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Tue 23 Apr 2024 @ 08:00 AM (CDT)

    South US: HTTPS Inspection Best Practices

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events