ARP - Duplicate use of xxx.xxx.xxx.xxx detected!

Hi, I have: Mikrotik on RB493AH, one Ethernet port is WAN, second Ethernet port is local (four VLANs are defined), DHCP server, Pool, Hotspot and src-nat for each VLAN, everything works fine, but struggling with following issue:

  • if there is i.e.. one WiFi AP connected to one VLAN via LAN port, correct IP is assigned from Mikrotik DHCP, connecting notebook via LAN port to the same VLAN, IP is also correctly assigned from Mikrotik DHCP
  • now pinging from notebook to AP
  • 2 times there is Request timed out
  • after that normal responses from AP appear
  • when monitoring via Wireshark, I see that notebook is asking via ARP for MAC of pinged IP address, Mikrotik is sending MAC address of VLAN adapter instead of MAC of WiFi AP device
  • after several seconds WiFi AP device is sending its MAC address with message (duplicate use of xxx.xxx.xxx.xxx detected!), it is a moment, when pinging is starting with response
    Do I have some configuration issue? Why Mikrotik is answering and sending its own MAC for question about IP address, which is not assigned to this interface?

It is probably connected with another strange thing: when pinging from Mikrotik to any device on VLAN, there is just timeout, when using ARP ping, there is a response.
Thanks for any suggestions …
Pumpir

it sounds like configuration problem. where exactly - not sure. Things to out - what arp settings you have, what have you bridged or switched, how dhcp-server is set up. You aslo can check with torch what packets are going where. firewall action=log also ir quite useful tool to see if you have some problem in firewall.

Do you have Proxy-ARP enabled on the VLAN interface?

No, proxy-arp is not used …