topic Multiple ARP requests bringing network segment down in Next-Generation Firewall Discussions

Multiple ARP requests bringing network segment down

svanarts — Tue, 07 May 2024 17:17:21 GMT

We have a guest network for which our PAN firewall is the default gateway. Periodically we have a wireless client begin ARP'ing for the gateway address over and over again. So much so that we can no longer ping the gateway address (PAN interface). It is always a single client doing this. Is there something I can do on the PAN to protect against these repeated ARP requests?

If the question is too vague, let me know what more information you would like.

Re: Multiple ARP requests bringing network segment down

OtakarKlier — Tue, 07 May 2024 20:57:31 GMT

Hello,

You can try Zone Protection. But the bigger question is, why are these clients doing this?

Regards,

Re: Multiple ARP requests bringing network segment down

svanarts — Tue, 07 May 2024 21:22:23 GMT

This is a guest network. These wireless clients are owned by the general public so I can't get hold of one of the problem units to see what is going on. Interestingly enough, both misbehaving clients I've caught so far on Wireshark are Samsung Galaxy S21's.

Re: Multiple ARP requests bringing network segment down

OtakarKlier — Tue, 07 May 2024 21:24:40 GMT

Hello,

Sounds like fun (sarcasm). Try the Zone Protection. Start with the defaults then slowly cut them in half until things start going funny. then turn the settings up a bit.

Regards,