New to this whole thing -- Not quite sure what I'm doing wrong.
-
That sounds like port snooping is enabled on the switches you’re playing with.
What this means is they’re active, for a small period of time, but inactivate if the “wrong” mac address connects to it. After a period of time the port will completely deactivate which is what your current situation is sounding like.
-
ask your IT staff, could be their setup
-
[quote=“Tom Elliott, post: 23406, member: 7271”]That sounds like port snooping is enabled on the switches you’re playing with.
What this means is they’re active, for a small period of time, but inactivate if the “wrong” mac address connects to it. After a period of time the port will completely deactivate which is what your current situation is sounding like.[/quote]
What qualifies as a “wrong” mac address? The port that the client PC is plugged in to is all fine, and my laptop has been on the network for a very long time and has never had issues.
[quote=“VincentJ, post: 23407, member: 8935”]ask your IT staff, could be their setup[/quote]
Last time I talked to them, they didn’t know what “port forwarding” meant. Does not exactly inspire confidence in their ability.
-
Lol,
Port forwarding asside, I don’t mean your MAC is wrong or “bad” persay, but they may have Specific MAC’s assigned to each port on the switch. If the MAC presented is not the same as the MAC Assigned, it will deactivate the port. I forget the terminology used for this, but if your networking guys don’t know what port forwarding is, chances are this is way beyond their scope of ability.
-
[quote=“Tom Elliott, post: 23410, member: 7271”]Lol,
Port forwarding asside, I don’t mean your MAC is wrong or “bad” persay, but they may have Specific MAC’s assigned to each port on the switch. If the MAC presented is not the same as the MAC Assigned, it will deactivate the port. I forget the terminology used for this, but if your networking guys don’t know what port forwarding is, chances are this is way beyond their scope of ability.[/quote]
I don’t think there’s anything like that going on, then there would be an issue for people with laptops who often move around and connect to different ports. Like I said, I’ve been connected to this port since September and it’s always been as reliable as the campus network usually is, I’ve never had any problems until yesterday, so I assume it’s related to something I did.
I’ll submit a ticket to IT about it, but I suspect I’m the cause of the problem here. -
[quote=“cenzo188, post: 23405, member: 22421”]If I go into the closet where the switches for the floor are located, and move my wire to a different port, it works fine for a while until it inevitably fails again. So far I’ve needed to move it 4 times, and none of the ports I had it in previously work anymore. Even if I plug a different computer in, I get no network on any port that I’ve used.[/quote]
This is what leads me to think the port verification thing is enabled.
None of the ports that previously “worked” no longer work after they decide to “fail”. This could very well be do the the “Rogue” dhcp server connecting to those ports, but I don’t know.
-
indeed… DHCP protection could be stopping you.
-
I see. I’ve been reading about the whole “dhcp snooping” thing and dhcp protection, it seems that’s what’s going on here. Especially since Cisco Catalyst switches like these have that ability built-in.
I’ve found myself a switch and it should arrive in a couple of days. Hopefully that’ll make things run a little bit smoother.
The question is, now, is there any way for me to re-enable the disabled ports on that switch? I’m guessing it would require somebody authorized to log in and reset something, but if there’s some easier way I’d love to hear it. -
No,
You’d have to have the IT guy’s reenable those ports, either by manual command entry, or by resetting the switch (whether by power or command).
Though I don’t know if resetting the switch will reset the ports.
-
[quote=“cenzo188, post: 23414, member: 22421”]I see. I’ve been reading about the whole “dhcp snooping” thing and dhcp protection, it seems that’s what’s going on here. Especially since Cisco Catalyst switches like these have that ability built-in.
I’ve found myself a switch and it should arrive in a couple of days. Hopefully that’ll make things run a little bit smoother.
The question is, now, is there any way for me to re-enable the disabled ports on that switch? I’m guessing it would require somebody authorized to log in and reset something, but if there’s some easier way I’d love to hear it.[/quote]Yes and it’s quite cumbersome, not to stray to far from topic here but Cisco also has an AMAZING way of getting more money out of you after purchasing one of these EXPENSIVE swtiches… I can’t even edit or disable the services because my switch was purchased on by a contractor and currently isn’t assigned to MY service contract…
Cisco switches require specific software and license in order to edit the settings. there are some free tools, but you will find they do not let you mange the way you want or need to. Sorry I do not have any expertise on re-enabling these ports, but I am interested to see how you accomplish this, I am STILL trying to rectify the issue so that I can log in an mange them!!!
FYI I use the Cisco 2960s here I prefer the cheapy Dlinks… at least I can edit them with an ip[ address and I don’t need special software! I use the DGS-1248-T when I have a choice <.<
-
[quote=“Jaymes Driver, post: 23458, member: 3582”]Yes and it’s quite cumbersome, not to stray to far from topic here but Cisco also has an AMAZING way of getting more money out of you after purchasing one of these EXPENSIVE swtiches… I can’t even edit or disable the services because my switch was purchased on by a contractor and currently isn’t assigned to MY service contract…
Cisco switches require specific software and license in order to edit the settings. there are some free tools, but you will find they do not let you mange the way you want or need to. Sorry I do not have any expertise on re-enabling these ports, but I am interested to see how you accomplish this, I am STILL trying to rectify the issue so that I can log in an mange them!!!
[/quote]Wish I could tell you how I accomplished it, but I didn’t accomplish it. In fact I got perma-banned from the LAN for running a rogue DHCP server, limited to only wireless internet and my download speed limited to 5mbps. It’s all done by MAC address, so I suppose unless I replace the motherboard on my laptop I won’t be getting back on the network anytime soon.
I’m hoping I’ll be able to get the network boot working tomorrow when my switch comes in and I set up my own little test network. A lot to go through for this one little computer… -
Things can be painful when you need to do the IT department’s job without them.
-
Alright, now I have my own switch A Netgear prosafe GS108E. I’m hooked up to it, but when I try now to start the isc-dhcp-server, it gives me the error:
[CODE]Starting ISC DHCP server: dhcpdcheck syslog for diagnostics. … failed!
failed![/CODE]
And in /var/log/syslog I have
[CODE]No subnet declaration for wlan0 (10.247.57.50).
** Ignoring requests on wlan0. If this is not what
you want, please write a subnet declaration
in your dhcpd.conf file for the network segment
to which interface wlan0 is attached. **[/CODE]
I don’t want wlan0 at all. I want it to use eth0.
In my dhcpd.conf file, I have:
[CODE]GNU nano 2.2.6 File: dhcpd.confDHCP Server Configuration file.
see /usr/share/doc/dhcp*/dhcpd.conf.sample
This file was created by FOG
use-host-decl-names on;
ddns-update-style interim;
ignore client-updates;
next-server 10.126.6.26;
subnet 10.126.6.0 netmask 255.255.255.0 {
option subnet-mask 255.255.255.0;
range dynamic-bootp 10.126.6.10 10.126.6.254;
default-lease-time 21600;
max-lease-time 43200;
option domain-name-servers 10.98.1.1;
option routers 10.126.0.1;
filename “pxelinux.0”;
}[/CODE]
I’m not quite sure what to do from here.