Thanks...

No, this is a new customer connection (new customer all together). The fix seems to be to drop the port physically and reconnect (either our side or their side) making this really seem like a FW issue on customer side.

When I randomly checked a dozen or so ports similar to the this customer's service from us, there are zero DA rejects - everything is just generally clean across the board. I've tried to tell the customer to contact Sonicwall for support and to troubleshoot but they are not listening - so I'm just looking to make sure I'm not going to have any egg in my face :)

Paul


-----Original Message----- From: Richard A Steenbergen
Sent: Sunday, December 18, 2011 4:25 PM
To: Paul Stewart
Cc: Humair Ali ; juniper-nsp@puck.nether.net
Subject: Re: [j-nsp] DA rejects

On Sat, Dec 17, 2011 at 08:11:39AM -0500, Paul Stewart wrote:

It has "magically" started working again for the customer, which is
quite strange.  Again, very confident this is a CPE issue but wanted
to ensure I understood how JunOS will look at ARP output like above
(make sure there is no confusion) :)

Erm, did you move the customer to a new endpoint on your side? If so,
you were probably receiving DA Rejects because they had your old router
MAC address stuck in their arp cache, and it "magically fixed itself"
when their ARP cache timed out and it re-learned the gateway mac.

--
Richard A Steenbergen <r...@e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to