I smell scriptkiddie... I'm not sure how a mac could travel from one
neighbor table to another though, sounds very strange... when you sho mac
addr XXX is the counterfeit MAC always coming in on the same port(s)???????
--Brad
"[EMAIL PROTECTED]
.com" To:
[EMAIL PROTECTED]
<m.m.jansen02
cc:
Sent by: Subject: RE: 3500XL -
duplicate IP and Windows NT/2000 server [7:73868]
[EMAIL PROTECTED]
.com
08/11/2003
09:56
AM
Please respond
to
"[EMAIL PROTECTED]
.com"
Searching CCO, connot find a thing. Do you have logging enabled, if yes
what
do the switches say? Try a protocol sniffer(receive span a problem server
port), sometimes it is nice to see ip handle things. And learn a lot...
What did the NT system log say?
Tried newer IOS? (long shot....)
Martijn
-----Oorspronkelijk bericht-----
Van: Firesox [mailto:[EMAIL PROTECTED]
Verzonden: maandag 11 augustus 2003 14:19
Aan: [EMAIL PROTECTED]
Onderwerp: 3500XL - duplicate IP and Windows NT/2000 server [7:73868]
I have a bunch of 3500XL switches thruout my customer's lan.
They are having a problem with unknown mac keep appearing and disappearing
from the network.
I can trace the mac-address of the unknown station by "show mac" from the
swtich CLI.
What's strange is that it appears at one switch, but a minute later it
appears in the different switch.
what's even more strange is that all NT/2000 servers log shows there is an
IP conflict with this mac address.
Of course, the servers IP function stops due to this duplicate IP, but
comes
back in a few minutes.
All the servers report the duplicate IP comes from the same mac address.
Has anyone seen this problem?
Thanks
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73889&t=73868
--------------------------------------------------
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
