Maybe a little OT comment mr B.HEIN?

Firesox, can also be a server problem, have you checked for rogue dhcp or
faulty scopes?

Martijn 

-----Oorspronkelijk bericht-----
Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Verzonden: maandag 11 augustus 2003 20:58
Aan: [EMAIL PROTECTED]
Onderwerp: RE: 3500XL - duplicate IP and Windows NT/2000 server
[7:73868]


I smell scriptkiddie... I'm not sure how a mac could travel from one
neighbor table to another though, sounds very strange... when you sho mac
addr XXX is the counterfeit MAC always coming in on the same port(s)???????



--Brad



 

                     
"[EMAIL PROTECTED]
                      .com"                    To:      
[EMAIL PROTECTED]
                      <m.m.jansen02           
cc:
                      Sent by:                 Subject:  RE: 3500XL -
duplicate IP and Windows  NT/2000 server [7:73868]
                     
[EMAIL PROTECTED]
                     
.com
 

 

                      08/11/2003
09:56
                     
AM
                      Please respond
to
                     
"[EMAIL PROTECTED]
                     
.com"
 

 





Searching CCO, connot find a thing. Do you have logging enabled, if yes
what
do the switches say? Try a protocol sniffer(receive span a problem server
port), sometimes it is nice to see ip handle things. And learn a lot...

What did the NT system log say?

Tried newer IOS? (long shot....)

Martijn

-----Oorspronkelijk bericht-----
Van: Firesox [mailto:[EMAIL PROTECTED]
Verzonden: maandag 11 augustus 2003 14:19
Aan: [EMAIL PROTECTED]
Onderwerp: 3500XL - duplicate IP and Windows NT/2000 server [7:73868]


I have a bunch of 3500XL switches thruout my customer's lan.
They are having a problem with unknown mac keep appearing and disappearing
from the network.

I can trace the mac-address of the unknown station by "show mac" from the
swtich CLI.
What's strange is that it appears at one switch, but a minute later it
appears in the different switch.

what's even more strange is that all NT/2000 servers log shows there is an
IP conflict with this mac address.
Of course, the servers IP function stops due to this duplicate IP, but
comes
back in a few minutes.
All the servers report the duplicate IP comes from the same mac address.

Has anyone seen this problem?

Thanks
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73907&t=73868
--------------------------------------------------
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Reply via email to