IP address conflict detection on Extreme Layer 2 switches

  • 0
  • 1
  • Question
  • Updated 4 years ago
Is there any logging feature on Extreme devices (switches or routers) that can detect IP address conflicts (in this case, on windows machines)?
Photo of Jimmy

Jimmy

  • 650 Points 500 badge 2x thumb

Posted 4 years ago

  • 0
  • 1
Photo of Paul Russo

Paul Russo, Alum

  • 9,694 Points 5k badge 2x thumb
Hey Jimmy

The switch will detect a duplicate IP address by default and warn you if a station is set to the same IP  Address of a VLAN.  Using DHCP snooping helps this as it does not allow any static IP addresses on the network.

Also look at Duplicate Address Detection (DAD) in the concepts guide.  It is on page 1255 of the 15.4 guide.

Hope that helps
P
Photo of PARTHIBAN CHINNAYA

PARTHIBAN CHINNAYA, Alum

  • 4,382 Points 4k badge 2x thumb
IP DAD is a good feature.

We can also use UPM script to avoid duplicate ip in network.
It is quite common scenario to have protection for VRRP gateway to avoid network outage.

These commands are to be applied on edge switch .Core switch has VRRP.

configure log filter DupIP add events FDB.arpViolation create log target upm Disable_DupIP_Port
enable log target upm Disable_DupIP_Port
configure log target upm Disable_DupIP_Port filter DupIP severity Warning

enable ip-security arp gratuitous-protection vlan <name>
enable ip-security arp gratuitous-protection vlan <name>

UPM script

create upm profile Disable_DupIP_Port
set var up1 47
set var up2 48
## please specify the uplink ports as up1,up2..
if ($match($EVENT.LOG_PARAM_3,$up1) &amp;&amp; $match($EVENT.LOG_PARAM_3,$up2)) then
disable port $EVENT.LOG_PARAM_3
create log entry "PORT $(EVENT.LOG_PARAM_3) WAS DISABLED DUE TO VRRP VIP CLASH"
endif
Photo of sandwood

sandwood

  • 60 Points
To fix ip address conflict, contact your ISP . After that, you can check your ip by using   Ip-details.com