Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've got a Dell 5424 with about 20 machines directly attached to it. I did a ping sweep of my network (and got answers from all 20), then went to the CLI of the switch and did show arp. To my surprise, I only see two arp entries: one for my router, and one for the machine I'm SSHed into to do this work.

What the heck is going on here? It's not that there's another switch in place, these machines are directly connected to the switch. Is my expectation of all those arp entries on my switch mistaken?

If I use ping (machine) from the CLI, that machine's MAC shows up on the port I would expect it to in the arp table. The arp timeout is set to 3600, which seems a bit low to me, but is the default on this switch. The time between my ping sweep and my show arp was way lower than that.

share|improve this question
1  
I'd expect there to be a MAC address entry in the table for every device directly connected to the switch.. As for what's happening, I've no idea. –  Tom O'Connor Dec 8 '11 at 22:04
    
Ok, good, my expectation isn't wrong :) –  Bill Weiss Dec 8 '11 at 22:05
4  
It is. Use show mac-address-table to see the learned MAC addresses - the switch does not care about IP addresses as long as it is just switching for Ethernet, thus, you would not have ARP entries. –  the-wabbit Dec 8 '11 at 22:12
3  
On this switch, it's show bridge address-table, it seems. –  Bill Weiss Dec 8 '11 at 22:23

3 Answers 3

up vote 5 down vote accepted

Unless a switch is doing ARP snooping, it doesn't need to care about devices that aren't directly communicating with an IP address that it owns.

If it were the router for the subnet, then you could reasonably expect it to have an ARP entry for most of the nodes on the network (at least the ones communicating outside the subnet actively); since it doesn't sound like it is, all it needs to do is track which MAC address is behind which port and send each frame to the port that contains that MAC address. The MAC address table (translating MAC addresses to ports) is separate from the ARP table (translating IPs to MACs).

share|improve this answer

As Shane and Aaron stated, the ARP table is the ip address to MAC address mapping table and would only be populated with entries for hosts that were communicating WITH the switch, not for hosts communicating THROUGH the switch. What you're after is the MAC Address table, which is the MAC address to port mapping table, which is what the switch uses to forward frames to the correct port/host.

share|improve this answer

You probably want show mac address instead of show arp - arp is the relation of L3 (IP) to L2 (MAC) addresses, and the switch doesn't generally care about IP addresses (some caveats apply, management, etc)

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.