问

s7506e-s交换机出现大量ip冲突提示

ARP攻击防御

2021-01-08提问

0关注
1收藏，1145浏览

zhiliao_IzCz8e

zhiliao_IzCz8e 零段

粉丝：0人关注：0人

问题描述：

S3110接入交换机通过光口分别接入S7506E的光口，

S7506E日志里都是2/0/26端口接的9418-8283-80fd 和其他端口接的下级S3110接入交换的IP地址冲突，请问这个是arp攻击吗？应该怎么解决？

%Dec 30 13:51:27:977 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 74ea-cbe5-e056 connected to GigabitEthernet2/0/11 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.14.
%Dec 30 13:51:27:977 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9428-2e1e-99f2 connected to GigabitEthernet2/0/9 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.9.
%Dec 30 13:51:27:977 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 and the device with MAC address 9428-2e1e-99f2 connected to GigabitEthernet2/0/9 in VLAN 100 are using the same IP address 192.168.100.9.
%Dec 30 13:51:27:977 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 and the device with MAC address 74ea-cbe5-e056 connected to GigabitEthernet2/0/11 in VLAN 100 are using the same IP address 192.168.100.14.
%Dec 30 13:51:27:978 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9428-2e1e-d0ca connected to UNKNOWN in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.34.
%Dec 30 13:51:27:978 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9428-2e1e-e16e connected to GigabitEthernet2/0/20 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.21.
%Dec 30 13:51:27:978 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9428-2e1e-97d6 connected to GigabitEthernet2/0/10 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.10.
%Dec 30 13:51:27:978 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 and the device with MAC address 9428-2e1e-e9fc connected to GigabitEthernet2/0/24 in VLAN 100 are using the same IP address 192.168.100.35.
%Dec 30 13:51:27:979 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 and the device with MAC address 74ea-cb26-30df connected to GigabitEthernet2/0/16 in VLAN 100 are using the same IP address 192.168.100.40.
%Dec 30 13:51:27:979 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 74ea-cbe5-fcb2 connected to GigabitEthernet2/0/2 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.2.
%Dec 30 13:51:27:979 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 and the device with MAC address 74ea-cbe5-f9c4 connected to GigabitEthernet2/0/12 in VLAN 100 are using the same IP address 192.168.100.12.
%Dec 30 13:51:27:979 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 and the device with MAC address 74ea-cb26-3229 connected to GigabitEthernet2/0/13 in VLAN 100 are using the same IP address 192.168.100.38.
%Dec 30 13:51:27:980 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9428-2e1e-e330 connected to GigabitEthernet2/0/16 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.17.
%Dec 30 13:51:27:980 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 74ea-cbe5-f94c connected to GigabitEthernet2/0/1 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.1.
%Dec 30 13:51:27:980 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 74ea-cbe5-e6e6 connected to GigabitEthernet2/0/23 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.23.
%Dec 30 13:51:27:980 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9428-2e1e-e38a connected to GigabitEthernet2/0/1 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.37.
%Dec 30 13:51:27:981 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 and the device with MAC address 74ea-cbe5-f94c connected to GigabitEthernet2/0/1 in VLAN 100 are using the same IP address 192.168.100.1.
%Dec 30 13:51:27:981 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 74ea-cbe5-e0ec connected to GigabitEthernet2/0/15 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.16.
%Dec 30 13:51:27:981 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9428-2e1e-dfe8 connected to GigabitEthernet2/0/19 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.20.
%Dec 30 13:51:27:981 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 74ea-cbe5-f83e connected to GigabitEthernet2/0/13 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.13.
%Dec 30 13:51:28:337 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9428-2e1e-c6d4 connected to GigabitEthernet2/0/25 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.11.
%Dec 30 13:51:28:337 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9428-2e1e-e7a4 connected to GigabitEthernet2/0/17 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.18.
%Dec 30 13:51:28:337 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 and the device with MAC address 9428-2e1e-e7a4 connected to GigabitEthernet2/0/17 in VLAN 100 are using the same IP address 192.168.100.18.
%Dec 30 13:51:28:338 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 and the device with MAC address 9428-2e1e-c6d4 connected to GigabitEthernet2/0/25 in VLAN 100 are using the same IP address 192.168.100.11.
%Dec 30 13:51:28:338 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 74ea-cbe5-f58c connected to GigabitEthernet2/0/14 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.15.
%Dec 30 13:51:28:338 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9428-2e1e-97b8 connected to GigabitEthernet2/0/8 in VLAN 100 and the device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 are using the same IP address 192.168.100.8.
%Dec 30 13:51:28:338 2020 hexin ARP/5/ARP_DUPLICATE_IPADDR_DETECT: -Slot=2; Detected an IP address conflict. The device with MAC address 9418-8283-80fd connected to GigabitEthernet2/0/26 in VLAN 100 and the device with MAC address 9428-2e1e-dfe8 connected to GigabitEthernet2/0/19 in VLAN 100 are using the same IP address 192.168.100.20.
%D

组网及组网描述：

最佳答案

bei

bei 九段

粉丝：23人关注：7人

提示信息里面已经说的很清楚了，哪个地址冲突，找到该地址设置位置后优化下

暂无评论

4 个回答

按时间按赞数

zhiliao_pdGY6

zhiliao_pdGY6 九段

粉丝：15人关注：0人

先通过mac和接口确认是否确实存在问题，：

举例

ARP/4/ARP_DUPLICATE_IPADDR_DETECT: Detected an IP address conflict. The device with MAC address 00-00-01 connected to interface Ethernet0/0/1 service-instance 1000 in VSI vpna and the device with MAC address 00-00-02 connected to interface tunnel 10 in VSI vpna were using the same IP address 192.168.1.1.

日志说明

ARP检测到重复地址

接口收到ARP报文中发送端的IP地址，与本设备学习到的ARP表项中的IP地址冲突

处理建议

修改IP地址