David Burgess wrote:
> On 2/23/07, Lee Sharp <leesharp at hal dash pc dot org> wrote:
>> David Burgess wrote:
>> > So an occasional client has a problem obtaining an IP address from our
>> > m0n0wall dhcp server. I've searched the archives and my problem appears
>> > be unique in some respects.
>> The few times I have seen this have been ARP table screwups. This can
>> be very common with wireless as clients move from switch (AP) to switch.
>> I would start by segmenting the network. If you can, divide wireless
>> and wired.
> Hm. Our entire network is wireless with multiple access points connected
> wirelessly. The only situation I can think of that would fit your
> explanation is when a client moves from one AP to another, which happens
> occasionally. Would that cause the problem?
> If so, then what is the solution? Is there some way to flush the ARP table,
> or manually update an ARP entry from either the router or the client side?
This is way beyond the normal scope of this list. So lets go! :)
First lets start with the arp table. Every system on your network has
one. Every computer, switch and AP. For one interface devices,
(desktops) it is a simple table. Type 'arp -a' from the command line to
see it. (Windows, Mac, Linux or Unix...) It shows the IP address
translated to mac address of everything it has seen. In a switched
network, that will be the router. It may include printers, servers, and
other systems you touch. At home connected directly to a router with no
other items, it will only be the router.
Now a switch has a much more complex routing table. It has no IP stuff.
It just knows the port each MAC address hangs off. Now what happens
when a MAC address moves? This depends on how far down a chain it is.
Say you have a switch at the router. It has several switches off it for
each floor. Each floor has several switches for each region of the
floor. Each region has one (or more) AP. Now Bob's laptop walks down
the hall. On the way it connects to the floor above. The AP says "I
have bob's MAC." The regional switch says "I have Bob's MAC." The
floor switch says "I have Bob's MAC." The router switch says "I have
Bob's MAC." down the chan to the floor switch on Bob's floor who now
says "I have Bob's MAC." but on a different port... And the regional
switch says "He has Bob's MAC." and on to the AP. But by now Bob has
gone back to his desk. So the first AP says, "But I have Bob's MAC..."
If you have someone on a edge between to APs they can flip back and
forth, and this goes on.
Solutions... You can shorten the "lease time" (I know it is not lease
time, but the analogy works) on some advanced switches. You can use
different ESSIDs so the client doesn't move as easily. You can use less
switches on the wireless network.