diff --git a/files/ansible-playbooks/update-indoor-bootenv.yml b/files/ansible-playbooks/update-indoor-bootenv.yml
index fd7398d..492561c 100644
--- a/files/ansible-playbooks/update-indoor-bootenv.yml
+++ b/files/ansible-playbooks/update-indoor-bootenv.yml
@@ -1026,6 +1026,10 @@
       register: dev2_sha256_before
       changed_when: false
 
+    - name: Refresh ARP 1 on DEV1’s LAN (send unsolicited ARP from temporary IP)
+      when: dev2_conn_method == "tunnel"
+      ansible.builtin.raw: arping -U -I eth0 192.168.1.11 -c 3
+
     - name: Copy bootenv image to DEV2 if missing or sha256 mismatch
       when: local_img.stat.exists and dev2_passfile_used != "NONE" and not (_blocked | default(false)) and ((dev2_sha256_before.stdout | trim) != (bootenv_sha256 | trim))
       delegate_to: localhost