IP Alias ArpWatch flip flop

[michmoor]

Hello,
I recently set up an IP Alias for my DMZ network (needed for NAT).
I have Arpwatch enabled for several vlans and one of them is DMZ.
Since IP alias has been configured i have been getting Arpwatch flip-flop emails for my VIP.

The mac addresses does change but the vendor stays the same. It seems to be switching between the physical mac address of the NIC and a virtual one maybe?
This is still a new subnet so i know there is no IP overlap.

Why does the IP Alias mac address keep changing?

[stephenw10]

The IPAlias VIP uses the same MAC address as it's parent interface. So I might expect to see the same MAC used with both IPs but not two MACs. It seems more likely something else was already using that IP address and there is now a conflict. Try to find what device has that MAC on your network.

Steve

[michmoor]

@stephenw10 thanks. This is a new vlan with only a handful of IPs designated. I will change the Alias IP and see if the problem follows. Will report back

[michmoor]

This post is deleted!

[michmoor]

@michmoor @stephenw10 This has been resolved. Thanks for the guidance.