My server group is saying they are getting an ip conflict error on the windows 2003 server. i see no problem and my managment sofwtare only sees one mac to that ip address. Is there a debug command to see if there is an ip conflict. Two mac's to one ip address. This server farm are staticly addressed so if there is a conflict the staff configured it. I would expect an error on my 6509 msfc as well. In addition does anyone know of any kind of acl that would only allow a specified mac address to a specified pc. Thanks in advance.
As regarding the access list, you can use mac access-lists on most cisco switches or port security that will auto learn the macs and then not allow any more macs to access the network. Just check out the switch command reference and search for 'MAC access list' and 'switchport port security'.
The switch will only complain about duplicate IPs when the duplicate is for an address that is supposed to ride on the switch. (The VLAN interface, for example.)
Otherwise, there's no easy way to lock this down- you can start investigating Dynamic Arp Inspection (DAI) coupled with Port Security and DHCP snooping.
This is a VERY involved process, and you ahve to be careful implementing this- in an environment where quite a few addresses are statically assigned, you're in for a lot of detective work and overhead! If you don't know what you're doing, there could be a lot of issues!
The quickest thing to do is get the MAC address of the duplicate IP address and track down that port on your network.
This document gives several answers on frequently asked questions for PFRv3 channel state behavior.
Q1: What are all the channel operational states from a BR (border role) perspective and what are the rules/conditions to be in each st...
The need was to reach an host inside a LAN through a VPN connection managed by the LAN gateway (Cisco 1921).
The LAN gateway performs NAT and there was a dedicate nat rule for the host i wanted to reach through VPN.
I couldn't connect to the hos...
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...