Status Incomplete

Reply
L1 Bithead

Status Incomplete

Hello,

what does this mean and how to solve it?

When doing an show arp all:

Davevanwijck_0-1606816998706.png

No MAC is displayed at an IP address.

 

Any help is welcome, thanks in advance

 

 


Accepted Solutions
L7 Applicator

in that case (there's a L3 vlan interface) @SteveCantwell s explanation holds:

 

the firewall attempted to reach out to the IP and did not receive a reply from the 'owner' either because it is not there, or the device is unable to respond

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

View solution in original post

Cyber Elite

Is it possible that there are devices that are still attempting to reach out to the device?

Have you removed the device IP from any virtual router configurations (if that was a next hop)

 

As long as devices on the network are attempting to communicate to or through the device, then the FW may continue to show.

 

You can always do a "clear arp all" to clear the table.

Help the community: Like helpful comments and mark solutions

View solution in original post


All Replies
Cyber Elite

Incomplete means that the OTHER side did not offer its mac address when the FW attempted to do an arp.

How to fix?  Determine why the other side didnt respond back.

Do a packet capture to confirm that the other side did or did not respond.

This may not be a FW issue.

 

Thanks

Help the community: Like helpful comments and mark solutions
L7 Applicator

Arp is for layer 3, mac is for layer2

Since you have vlan interfaces, you need to look up the mac table

> show mac all

 

 

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374
L1 Bithead

Show mac all does not display the MAC address we expect.
Weird thing is, the arp table was ok a while ago.

 

But suddenly it did not display the MAC address, but still the IP address is visable without a MAC.

 

L7 Applicator

in that case (there's a L3 vlan interface) @SteveCantwell s explanation holds:

 

the firewall attempted to reach out to the IP and did not receive a reply from the 'owner' either because it is not there, or the device is unable to respond

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

View solution in original post

L1 Bithead

Yes, that is what I thought as well. But why isn't the table being refreshed automatic after a certain time?

I would expect that this entry would be deleted after the TTL?

 

(The device is still connected, but the MAC address is gone. Maybe device is defect, but not sure yet.

We are busy with further troubleshooting.)

 

Cyber Elite

Is it possible that there are devices that are still attempting to reach out to the device?

Have you removed the device IP from any virtual router configurations (if that was a next hop)

 

As long as devices on the network are attempting to communicate to or through the device, then the FW may continue to show.

 

You can always do a "clear arp all" to clear the table.

Help the community: Like helpful comments and mark solutions

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!