Device recognition issue with Zenarmor

[LucaS]

Hi,

I'm experiencing unusual behavior with Zenarmor 2.4 on OPNsense 26.1.3 in the following setup:

OPNsense router with VLAN1, Zenarmor enabled, and DHCP handled by Kea.

L3 switch with multiple VLANs, configured with DHCP relay to Kea on OPNsense.

Zenarmor often seems to confuse devices: it recognizes a device on a VLAN managed by the switch and assigns it the switch's MAC address, even though the same MAC already exists on the device with the switch's IP in VLAN1. This causes device identification and monitoring issues across the network.

Do you have any suggestions on how to resolve this, or is this a known behavior of Zenarmor in multi-VLAN scenarios with DHCP relay?

Thanks for your help.