On Wed, Jan 02, 2002 at 02:15:54PM +0000, Ganesh Sittampalam wrote:
> > > 08:39:16.118899 0:50:56:c0:0:1 ff:ff:ff:ff:ff:ff 0806 60: arp who-has
> > > 10.3.8.2 tell 10.3.8.67
> > > 0001 0800 0604 0001 0050 56c0 0001 0a03
> > > 0843 0000 0000 0000 0a03 0802 0000 0000
> > > 0000 0000 0000 0000 0000 0000 0000
> >
> > OK, sandy thinks 10.3.8.2 is behind its 'normal' interface (not the
> > interface to rocky) for some reason. Can you get a dump of your sandy
> > routing table (c:\winnt\route print)?
>
> Sorry, I typoed in my previous email. 0:50:56:c0:0:1 is the MAC address of
> VMNet1, not VMNet0 (which doesn't actually exist), which is its interface
> to rocky, and its "normal" interface doesn't have TCP/IP bound at all.
Having TCP/IP or not is probably not the problem. If W2K answers ARP
requests on this interface you're still fscked.
Can you try connecting to sandy for the first time from an external host
while having a tcpdump running on that external host (which has to be on
the same subnet)? Please try to find out:
What MAC address sandy sends in ARP replies
What MAC address that ARP reply seems to be coming from.
cheers,
Lennert
_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge
