Detect Ip conflict with ROS

RouterOS General
1

Hi!
How To Detect and log the mac address of the bad host, which has the same IP with MT ROS. ?
Please Help Me, It’s urgent.

Thanks
Regards
Karapet

2

You can connect windows machine somewhere in your network, if there is IP conflict windows will tell you :slight_smile:.

I don’t know any methods how you can do it with RouterOS

3

When using Cisco it logs duplicated Ip Address.
But I want To have some method To log the Duplicated Ip with ROS.

4

Hello,will Windows tells,which IP adress is in conflict ?
thank you for answer

5

feature request!.. something like this:

http://ipwatchd.sourceforge.net/

:smiley:

6

If you have a CURRENT problem, do this:

  • Pick an available IP address in the range that has a suspect/known duplicate
  • Assign the above IP address to the interface on the MT that faces that network
  • Remove or disable the IP address on the device that is SUPPOSED to have that IP
  • Do: “/ip arp remove [find]” on the Mikrotik(it is not NECESSARY, but helpful sometimes)
  • Attempt to ping the IP that is duplicated. IT WON’T MATTER IF IT RESPONDS
  • If the IP is truly duplicated, you will find the MAC address of the offending device in the ARP table (even if it did not respond to the ping)
  • Restore the IP on the device that is supposed to own that address
7

Something like arpwatch would be more useful, IMO.

8

Yes. Arpwatch is better.

9

Tool > IP Scan
Search double entry in Address column:

Tool > Ping
Arping give you a double MAC in seq number:

You can do a testing via scripts and that way detect a conflict automatical.
My way is add a script into DHCP Server who check every new lease and alarm me via e-mail.