GetArp from Cisco ASA

[L.S.]

I have a group of switches (3750-e) where the default gateway is an ASA, so this contains the ARP entries. I am running switchmap against these switches and ASA, and I get everything BUT the IP Address and DNS Name. When I run the GetArp.pl in debug mode, here is what I get

begin output
main::: reading ARP table from 10.22.12.10...
SwitchUtils::OpenSnmpSession: called to open a session to 10.22.12.10
SwitchUtils::OpenSnmpSession: trying to open an SNMP session to 10.22.12.10
SwitchUtils::OpenSnmpSession: SNMP session open, testing a GET of the sysObjectId
SwitchUtils::GetOneOidValue: called to fetch 1.3.6.1.2.1.1.2.0
SwitchUtils::GetOneOidValue: returning 1.3.6.1.4.1.9.1.670
SwitchUtils::OpenSnmpSession: GET succeeded, valid SNMP session opened
SwitchUtils::OpenSnmpSession: returning SUCCESS
main::GetRouterArpTable: GetRouterArpTable from 10.22.12.10...
main::GetRouterArpTable: returning success
end output

any ideas?

-L

[L.S.]

sorry for the long delay here...

10.22.12.10 is the ASA

the ASA has multiple IP's, via sub interfaces, and each of those sub interfaces are the def gate for all clients on those respective networks

my MacList file is not empty, but does not contain any items from the subnets on the ASA

When you ask if there are other routers, yes..but for the netowrks on the ASA, no..all ARP entries are on the ASA

I can do a 'sh arp' on the ASA and it results in this output
prod-dmz 10.22.7.5 0001.d74c.9c10 0
prod-dmz 10.22.7.4 0001.d746.af50 1
prod-dmz 10.22.7.28 001d.0931.908f 25
prod-dmz 10.22.7.23 001e.c956.d58e 32
prod-dmz 10.22.7.24 001d.0930.3c5f 38

    prep-dmz 10.22.9.5 0001.d74c.9c12 0
    prep-dmz 10.22.9.4 0001.d746.af52 0
    prep-dmz 10.22.9.9 0001.d75f.4782 1
    prep-dmz 10.22.9.31 0050.568b.35c6 37
    prep-dmz 10.22.9.30 0050.568b.7d84 45

etc, etc, etc...I have 7 subnets on this ASA

[Pete Siemsen]

I assume 10.22.12.10 is the address of the ASA (not a switch), right?

Hosts connected to the switches use 10.22.12.10 as their default gateway, and so do the switches themselves, right?

Is your MacList file empty?

Are there other routers in the network?

Can you do a "show arp" command on the ASA?