Cisco 3560 :: Scanner Flooding The Network With Arp Request?
Oct 7, 2011
I have a Canon ScanFront 220 network scanner that seems to have a problem with our network. It's plugged into a Cisco 3560. The network is operational, just chatty.
A wireshark session for just a few seconds looks like this: (192.168.81.42 is the scanner)
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.89 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.90 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.91 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.92 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.93 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.94 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.95 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.96 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.97 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.98 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.99 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.101 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.102 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.103 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.104 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.106 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.108 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.109 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.110 Vlan81
1w4d: IP ARP: rcvd req src 192.168.81.42 0000.8583.2c43, dst 192.168.81.111 Vlan81
I can't find anything on the scanner that would cause this.
My IPTV connection works fine so far but as soon as I start watching TV I can't use my WiFi connection anymore. My router is an "Alice Modem 1121" (SIEMENS S1621-Z220-A) with 4 LAN ports and a WiFi interface (4th LAN port provides the IPTV). It is directly connected by wire to my PC's ethernet card for the IPTV and the internet is provided via the WiFi. When I activate the LAN connection the WiFi and internet connction stays up and requests can be sent but nothing returns anymore. Another device (iPod) has no problems with accessing the internet while IPTV is in use. I also have a Netgear WNR1000v3 router which I tried to use as AP instead but it's exactly the same problem. Unlucky the Netgear router is not supported to use dd-wrt firmware yet (I've found a step by step guide to prevent multicast floods with dd-wrt/ebtables). But maybe the Alice Modem can handle this problem on its own. I read some stuff about VLANs and splitting them but I have no clue how that would look like.
I'm having an issue with my network, where we're are experiencing random and brief network outages. They happen a couple times a day and last 5-10 seconds. when I check my two backbone switches (4506 : Supervisor: WS-X4516-10GE ,IOS : cat4500-ipbase-mz.122-31.SGA8.bin), STP remains normal and no topology change occurs.
using virus scanner over the network and this is related to my workplace. a pc with win xp can share all drives (including c:) over the network with another pc with win xp as well. let's say pc1 and pc2 (both with win xp). i can scan pc2 from pc1 once i hv shared all the drives. but for win vista n 7, i found out that it is not possible to share c:...yes, there are some ways to share it but the entire c: cannot be shared. n i also know that c: cannot be shared entirely due to security purposes. but can i bypass this only for virus scanning purpose? i know many will juz ask me to install the anti virus on the infected pc, but if possible i want to scan it over the network. if i hv to scan 20 PCs at the same time i find it easier to do it from a single pc than to install the anti-virus at every single pc.
I added the network printer cum scanner - cm1312, going to control panel >> add printer >> etc. etc. Now I can print. But there is no scanner installed. What I can do?
I have recently changed a couple of our companys office routers over from a netgear vpn router to this, all has gone well with the cisco router providing much better speed and reliablilty... But....
I have one little problem, at one of our offices they have a brother printer that has a scanner built in, since this change over the scanner does not seem to want to work,
as far as i can guess the router is blocking communication to the scanner, printing is working fine. is there anything that I need to enable or add to the settings on the cisco to get this working? I believe that the printer is using some kind of multicast to connect to the PC's
Im working for a client at the moment and I've had to setup a network printer for them, I've got 4 Windows 7 machines easily printing over the network to this printer that is connected wirelessly but they want one of there machines to use the scanning functionality of the printer.The scanner doesn't show up at all in the local network devices like the printer does and to be honest i don't really have any experience with scanning over a network to a windows 7 machine, but this printer does support scan to ftp so my idea is to setup a small ftp server on the windows 7 machine with a folder to stored scans on the desktop or something, then put the details of the server in to the printer making it as easy as possible for the customer to scan stuff and just get it from the folder on the desktop, i could also share this folder over the network for anyone to open and get a scan if needs be.
I've been looking for a way to detect the level of traffic caused by unknown unicast traffic on a Catalyst 6509.I have found mechanisms to mitigate it but nothing to actually detect/measure what the levels might be.
I have a Nexus 3064 which is not recording source MAC addresses after a successful ARP. The switch is then flooding the entire vlan with unicast traffic.
The config is a boring single VLAN. One port (48) is going to a 6509. Not as a trunk, just extending the VLAN. There are SVI's on both switches. the default route for the Nexus users is the 6509's IP.The switch was basically, pulled out of the box, setup a single vlan(with jumbo frames) andan SVI, then plugged in the users. Nothing special.
I have a serious problem with nexus 7018, there're unicast flooding on one n7k, named n7k-1, which is the member of vPC domain combined with 2 N7Ks. [code]I had clean the mac-address-table, and all mac-address-tables had been synced fine, and the unicast flooding went away.
How could I fix the mac-address sync function between the modules ?
The problem that I am facing is while accessing internet.I have replaced the LAN card also. It sends request but receives nothing. The cable line is also working fine
I have a 2x Cisco 3750G switches (Stacked) that are part of an IP Video Surveillance System .All network is set to 1 VLAN (VLAN 1 default).The Cisco SWs ( Core ) are configured with IGMP Querier + Snooping .Connected to the Cisco SWs are 4 Fiber Rings(Loops) for redundancy . RSTP and IGMP Snooping are enabled on all the network SWs .Network Architecture Figure :
When all Fiber Rings (Loops ) are connected , the Cisco and Ring SWs spanning-tree tables show the blocked and forwarding ports properly .I am able to connect all my IP Cams + Encoders to the Ring SWs and connect my Servers + WorkStations to the Cisco SWs to record and view the multicast ip streams .All streams from Rings 1 ,3 and 4 are getting normally to the Servers + WorkStations through multicast ( IGMP Snooping are filled correctly on the Cisco and non-Cisco SWs ) . All multicast streams are joined normally except for Ring 2 .The Multicast streams passing through Ring 2 will operate normally for around 2 hours then after that the Fiber SWs begin to flood their multicast traffic causing the cams on the same switch to drop off the network .
I checked the Configuration of all the SWs on Ring 2 but all are are the same .
What is weird is that I have to set all the streams to unicast to stop the flooding just on Ring 2 (All other rings are not affected ) then after some time if I enabled a video multicast stream on one of the SWs of the Ring it will be streamed properly to the Servers + WorkStations ( All IGMP tables along the way will be filled properly ) then again after 2 hours or so , the flooding will start again suddenly and all IGMP table entries for the SW on Ring2 will be empty . No problem occurs on the other Rings which have more multicast streams .
Is blocking echo request to prevent ping sweep the same as having a firewall in stealth mode? And how could someone ping sweep from outside if you had a firewall at all?
I have a N600dp. My printer, Brother MFC-J410W, is plugged into the router USB port. The printer function works but the scanner function doesn't. I keep getting an error message that the printer is not connected.
We use SecurityMetrics as our vendor for PCI compliance scanning. Of all our servers, only the video server fails their scan, and this is their result: "This scan is inconclusive. Though your server had open ports, we were unable to connect to any of them successfully. There is a high probability that some type of firewall or scan-detection software is blocking us from accurately scanning your server. Please configure any firewall or software that would interfere with our scans to allow all traffic from SecurityMetrics" Our streaming video server is our only public-facing server that has port tcp/udp 1755 open (for the mms protocol). All our other servers behind this firewall pass the test, but they only have standard email and http ports open. I am assuming that their scan of port 1755 triggers some sort of threat detection on the ASA. (I have "Basic Threat Detection" enabled only.)
we had a problem with a customer wlan in our warehouse (cannel overlapping). The troubleshoot needed a long time. For the future if requipred in case of problems i want to configure one access point in the warehouse as a scanner (please find picture in the attachement). The Autonomous cisco 1242 is now configured as scanner but i can't see any logfiles? Where can i find these informations. This is the cisco description of the scanner mode:Scanner—Functions as a network monitoring device. In the Scanner mode, the access point does not accept associations from clients. It continuously scans and reports wireless traffic it detects from other wireless devices on the wireless LAN. All access points can be configured as a scanner.
First i need to ask you i have bought a xerox scanner 3220 it is not net work ready i need to convert the usb 2 to wire less port and it requires a network server and maybe your software.accomplish this with your software and any hardware.
I am having trouble getting my Ricoh printer/scanner to communicate with the pc. It does not loop back completely without a "check the configuration network." I am not certain if the path is not right or I may be doing something else. I need to get the email function to work with my computer. I am using static ip address to communicate with the devices.
I have a Hp 4700 all in one wireless printer. I am able to print with no problem. I just can't copy or scan. when you first turn the pritner on it comes up with a scan/copy error. I have tired everything and nothing works.
I have a multifunctional printer epson cx8300 and have it connected to a print server TP-LINK TL-PS310U in a hope that every PCs on the network can share the printer to do printing and scanning. When I did a test to check if I can send a job to the printer, I could actually print it through the print server. However, the problem now is I can not scan a document. When I went to open windows Fax and Scanner window, unable to see any scanner there. So my question is whether this is the limitation of the epson printer itself or the print server or the scanners do not work on the network.
I have installed Ver.1.0.03 (Build 14) Firmware on my E4200 I launch cisco and detct the printer fine prints fine but goes to offline and my scaner in that printer not work My printer is cx7400.
Model name: Linksys E4200 Model number: E4200 Firmware version: 2.0.36.126507 Operating system: Windows XP SP 3 Software version: 1.4.12005.2 Connection type (WAN): DHCP
My Canon MX882 multifunction printer is connected to the router via USB cable. The printer works. The scanner does not work.
I'm working on a new network design for my company. We're expanding and opening some more offices and satalite sites. We're a UK based company but opening some US sites.We have a main UK office (Office A on the diagram) a call centre (Office B) and then two buildings on another site (Office C). The USA offices will be very small and only require a couple of computers, hence the small IP allocation. I have marked the IP addresses of the links on the diagram, I intend to use 3560 switches for all the switches marked and all links will be layer 3 to route multiple VLANs from each site to each site (where permitted). question is this: How do I achieve this in the switches? I'm thinking that OSPF is the way forward, is this right? I want to do as little configuration on the switches as possible to allow for dynamic updates of the network (i.e. I don't want to add static routes for everything).
I want to give a breif overview of the current setup and what I had planned to do in the future. This is also where a few questions come into play. Currently we have 3 10.x.x.x subnets between three buildings with a wan connection. This connection is invisible to us so it can be seen as just a lan. The speed is 100mb. We have a 2811 router sitting at each building translating their traffic back to 10.3.1.1. We then have a router in the main building which ships the 10.3.x.x traffic to a ASA and then out the door to a ISP.
My plan was to upgrade this 100mb WAN connection to 10g fiber between our buildings as they are in extremely close range of each other. I would need a equipment upgrade as a 2811 won't support 10g traffic. Rather than replacing 3 routers in each of the buildings it seemed logical that I could get something like a catalyst 4500 or 6500 and do int vlan routing making it all one huge campus lan. Creating a vlan for each building to segment the traffic between them. My understanding was that a cat 3500/4500/6500 did not need a router with sub interfaces in a one arm setup to bridge this traffic. This is where the problem comes in.I tested with a cat 3560 and was unable to get the vlans to route correctly. Do I have to have a router to get int vlan routing to work? If so then I might as well get a Router which can handle multiple 10g fiber for the core instead of a cat 4500/6500 since I'd need the router to do the int vlan routing anyway?
