Re: [AFMUG] is there a way to sniff the subnet a customer has configured

[Jesse DuPont]

Look at the MAC address/bridge table of the SM and see if there are multiple MACs showing on the port facing his equipment (lan0?). If there are, look in the ARP table of the router with the gateway for that segment and see if there are IP addresses associated with those MAC addresses. Do an MAC address lookup to see what vendor those MAC's are assigned to (one of them should be SonicWall/Dell). Jesse DuPont Network Architect email: jesse.dup...@celeritycorp.net Celerity Networks LLC Celerity Broadband LLC Like us! facebook.com/celeritynetworksllc Like us! facebook.com/celeritybroadband On 7/14/16 11:47 AM, That One Guy /sarcasm wrote: We have a customer, I suspect hes being dishonest and statically configured his device, but says hes DHCP, we have an ARP matching his MAC and correct IP on our mikrotik, but im guessing he just assumed it to be a /24 or something Is there any way to tell if this is the case? I see no DHCP request coming from his connection his device is a sonicwall -- If you only see yourself as part of the team but you don't see your team as part of yourself you have already failed as part of the team.