ARP issue, I see same IP on all interfaces

Can someone suggest it to me, when i ping my internal host which should be only on eth1 as per Keith barker cbt lab, i see it coming in arp on all interfaces of my firewall eth0,1,2.

Please see below:

[Expert@HQ-FW1:0]# arp -a? (10.1.1.49) at 00:0C:29:4F:C8:22 [ether] on eth1
? (10.1.1.50) at 00:0C:29:0F:5A:D5 [ether] on eth2
? (10.1.1.50) at 00:0C:29:0F:5A:D5 [ether] on eth0
? (10.1.1.50) at 00:0C:29:0F:5A:D5 [ether] on eth1
? (172.16.1.120) at 00:0C:29:E0:CE:8A [ether] on eth2
? (192.168.1.222) at <incomplete> on eth0
? (10.1.1.121) at 00:50:56:C0:00:02 [ether] on eth1
? (10.1.1.25) at 00:0C:29:4E:72:3E [ether] on eth1

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

boyet_919

What is your source and destination IP? What interface does your source and destination hosts come from/go to?

olaHalo

If you're doing any clustering it could be magic mac

Edit
didnt realize how old this post was