How to delete a stale alias?

[SmokeyJoe]

(OPNsense 26.1.11; yes, I know. It's on my todo list.)

I have a host, foo. It has a MAC alias for use in firewalls, and an IP allocated by DNSMasq. Its IP address used to be 192.168.1.250, but I recently moved it to a VLAN, and its new address is 192.168.30.254.

OPNSense refuses - REFUSES - to let go of the old address.

I've been debugging a strange connection problem - users' connections have a failure rate of about ⅓ to ½. Sometimes the connection is flawless, sometimes it fails with 'No route to host'. Watching the firewall logs, I see that sometimes the firewall will route the connection to the old IP. There's nothing there, so the connection fails.


I have tried :

• Deleting entries individually via Firewall: Diagnostics: Aliases
• Flushing via Firewall: Diagnostics: Aliases
• Exporting, editing and reloading config.xml
• Disabling and re-enabling the alias via Firewall: Aliases
• Editing or deleting /var/db/aliastables/foo.* and then rebooting

And none of these will remove the old IP. Every time I visit the Firewall: Aliases page, the stale alias is recovered from... somewhere.


My last option is to try deleting the alias entirely and recreating it, but I'm reluctant to do that since it's involved in dozens of LAN and WAN rules.


Can anyone suggest anything else?

[Monviech (Cedrik)]

Check Interfaces - Neighbors - Automatic Discovery

If enabled the MAC address alias uses the database you find there.
If disabled then ARP is used.

[SmokeyJoe]

I love you. So much.

Yes, disabling Automatic Discovery has cleaned the alias up. It's now showing exactly what it should.

Thank you!