topic RE: ARP LIMIT C5210 in ExtremeWireless (Identifi)

ARP LIMIT C5210

Luis_Mendes — Fri, 02 Oct 2015 18:21:00 GMT

Controller C5220 have a message:

ERRO: Dynamic ARP entries exceed the MAX limit: 4096

RE: ARP LIMIT C5210

Doug — Fri, 02 Oct 2015 18:26:00 GMT

Take a look at the following article....https://gtacknowledge.extremenetworks.com/articles/Solution/Controller-becomes-unreachable-Dynamic-A...

RE: ARP LIMIT C5210

Luis_Mendes — Fri, 02 Oct 2015 18:26:00 GMT

This message only appear on firmware 9.21.xx. On firmware 9.15 no show this message.

RE: ARP LIMIT C5210

Luis_Mendes — Fri, 02 Oct 2015 18:26:00 GMT

Other message is:

TCP: Possible SYN flooding on port 13013. Dropping request.

Whit command

netstat -tuna |grep "SYN_RECV"

All traffic has redirect to address 172.31.0.17 and this address has an interface TAP0

tap0 Link encap:Ethernet HWaddr 00:11:22:33:44:55 inet addr:172.31.0.17 Bcast:172.31.0.31 Mask:255.255.255.240
UP BROADCAST RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:228210597 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:3307952554 (3.0 GiB) TX bytes:0 (0.0 b)

RE: ARP LIMIT C5210

Doug — Fri, 02 Oct 2015 18:26:00 GMT

I'm not sure the code track would matter, it may depend on when the issue is triggered. You should contact the GTAC so someone can investigate this further. When these messages occur it's usually network traffic related not controller or firmware specific.

RE: ARP LIMIT C5210

Doug — Fri, 02 Oct 2015 18:26:00 GMT

Tap 0 is the port that captive portal uses for the url redirection. You can tcp dump directly off of that port to see what the traffic looks like....

RE: ARP LIMIT C5210

Doug — Fri, 02 Oct 2015 18:26:00 GMT

tcpdump -i tap0 -s 1600 -e -w capfile.cap

Then you can ftp the file off the controller for review...

RE: ARP LIMIT C5210

AG1 — Fri, 02 Oct 2015 18:26:00 GMT

Thank you Doug for stepping in. I have been working with Luis Mendes on this case and we have an open case for the reported issue.