Its back WIFI_SPOOFED_ARP_DETECTED

Despite having lines in the overrides

My logs are flooded once again.

I can’t copy past the overides here… I get a 403 error.

1 Like

Fortunately…

@GaryHansen found an extra ! and removed it.

I have this error, but I can only find this message as having it. Is WIFI_SPOOFED_ARP_DETECTED brought up elsewhere?

My problem is that devices are shown spoofing their own MAC address, as in:

Spoofed ARP detected from Client [4E-E2-62-1D-11-F6] Spoofed-MAC [4E-E2-62-1D-11-F6] IP [192.168.4.113] on SSID [XYZ-WiFi] Radio [1] count [1]

The APs carp about it in Notifications > Events. Is this legit? Using X7-35X’s

TIA!

!
wireless wlan 1
no dynamic-arp-inspection
!