One of our Cat5513 has been displaying a lot of the error message below:
%SYS-4-P2_WARN: 8/Invalid traffic from multicast source address 01:00:5a:52:4c:4d on port 8/58
The frequency of this is quite disturbing. What this error is about? Module no.8 is our Gigabit Ethernet WS-X5410. Can that multicast address be mapped to an IP address or unicast mac-addresS? How can i go about resolving this?
Most of the 4500 Switches in our network are giving the similar error for so many ports
%C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 1 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on p t Gi2/6 in vlan 100
Its impossible to do a wireshark packet tracing for all the ports.
Issue I am having with a Cisco 4507? Below is the error i am receiving.
Feb 14 10:06:09 EST: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 508 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Po10 in vlan 112
Feb 14 18:44:06 EST: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 119 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Po10 in vlan 112
Feb 15 00:51:06 EST: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 366 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Po10 in vlan 112
[Code]...
I have started to notice an increase in traffic from all my LAN workstations to the multicast address of 224.0.1.20, all with the same destination port (79). IANA shows this address as reserved for "experimental testing". Are there any typical applications or protocols that use this multicast address? My first thought was malware running on the hosts but it's a little tricky to prove.
View 5 Replies View RelatedI have configured a Aironet 1310 bridge as a WGB and is connected to a Aironet 1242AG AP wirelessly!A sensor(IP device) is wired into the 1310WGB. The sensor needs MULTICAST to operate!I checked the DETAILED STATUS of the RADIO and both the 1310 and 1242 are blocking multicast!The RELIABLE MULTICAST TO WGB option is enabled on the 1242AP already!
View 1 Replies View RelatedIhave a 3560 w/multicast support and I'm trying to configure a simple environment. I have 2 ports configured, one for the multicast server and the other for the client. Each are on their own subnet, so I have an ip route between the two. My run config on both ports is:
ip multicast-routing distributed
interface fastethernet 0/3 & 0/4
ip pim version 2
ip pim sparse-dense-mode
I'm using vlc server /client configured to use 224.0.0.1 on my isolated network. I can see the mulitcast traffic going into the port, and I the client is sending reports, but I think the 3560 is dropping the packets, since I don't see them coming in the client port. Need to configure a simple multicast environment using 2 ports on a Cisco 3560.
I have been trying to clone my PC's MAC onto my Linksys WAG120N adsl2+ modem router .
I click the the clone my PC's MAC button in the MAC address clone tab. I get the following error :
"Mac address cannot be the multicast address"
The MAC address starts with 1C:C1:XX:XX:XX:XX
I even tried to update the firmware.
I have been tasked with building a vpn tunnel with a partner company between our company's PIX firewall and the other company's ASA's firewall. The traffic flow will be Partner A company users will be accessing my company's Citrix server. I want to source-pat the partner company user traffic to my company's PIX inside interface as it enters my LAN to access my company's Citrix server. The partner company will be PAT'ing their user traffic to a single ip address - let's say for discussion purpose it is 68.108.244.25. So there will be site-to-site vpn configuration and nat configuration required to be performed to enable this traffic flow according to the above requirements. I am comfortable with the site-to-site vpn configuration tunnel so I don't think it is necessary to post this portion of the configuration to be reviewed by this form. What I do need is NAT portion of the configuration.
{My Company's Citrix Server} ---------<inside ifc>-[PIX525]-<outside ifc>--------(internet)------{Partner Company A host PC's}
10.100.12.103 68.108.244.25
My proposed configuration to enable nat'ing (or pat'ing) Partner A user traffic to my PIX firewall's inside interface is the following:
global (inside) 9 interface
nat (outside) 9 access-list PartnerA_source_nat
access-list extended PartnerA_source_nat permit host 68.108.244.25 host 10.100.12.103
I have made a test lab on packet tracer with three routers in triangle shape after each router i connected a switch with on each switch four end devices . now i want to make a routing table on each router, but the probleme is that each time i get an error "invalid next hop address ( its this router)". i am sure its the right gateway i type in .
View 3 Replies View RelatedMy PC says "invalid IP address" when I try to connect. It says the IP address is 00:00:00:00. it only does this on the computer but works fine on all our laptops. I've been googleing solutions and i have tried the 'ipconfig/release' and 'ipconfig/renew' but this doesn't work. It just comes up with a error (I think its because the computer cant connect). We use a Belkin wireless connector. Its windows xp.
View 1 Replies View RelatedI want to know if there is way to tag traffic with DCSP tags without having to do all the other requirments of QOS setup. All i want to do is just tag traffic at different DCSP values via source and destination IPs. We do not have a need to be priortizing traffic on out internal switches. We just want to tag the traffic so our MPLS provider can distinguish the different types of traffic.
Our environments is primarily 3750s in all offices.
We have 2 switches split across 2 datacentres connected via an interconnect. Over the past couple of days the interconnect provider's Cisco kit has shut down our port (err-disabled) due to a broadcast storm. They had the level set at 1 which I thought was a bit low. They say they tried to set to 2, then 5 but still kept tripping the storm-control feature so they set at 10. They say they've always had it set at 1% (on a 100Mb switch) and so we must be generating more broadcast traffic.
I'm trying to identify where the broadcast traffic is coming from. On our Cisco 3750 I've clear interface counters and when I do a sh run | i broadcasts there are a few ports which have what seems like a high broadcast count. The one port that is especially high and the only one tripping the storm-control feature (I've enabled on all our ports to try to identify where the traffic is coming from) is the port connected to the 100Mb interconnect. I've mirrored that port to another port and connected a server with wireshark so I can capture all the traffic across that port.
What I'm struggling to find is the source of the broadcast traffic.I have a few questions are these broadcasts layer 3 or layer 2 broadcasts. Also in the output below when it says broadcasts received is this inbound to the port i.e. from the connected device or is this a total of inbound and outbound broadcasts.
When I use wireshark and filter the capture on broadcasts (ff:ff:ff:ff:ff:ff) I see only 200-300 compared to the thousands the switch is reporting.If I filter on the broadcast IP address I also don't see the numbers corresponding to what I see in the show interface output.
GigabitEthernet1/0/1 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 0014.a93f.7401 (bia 0014.a93f.7401)
Description: Interconnect
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 4/255, rxload 44/255
Encapsulation ARPA, loopback not set
[code].....
also I'm currently doing : monitor session 1 source int g1/0/1 both, and also tried just rx incase I just need to be looking at receive traffic but still nothing is standing out.
I have a requirement to bypass some specific traffic (with particular source to specific internet destination) in ACE 4710.
All the webtraffic (http and https) is configured to loadbalance to my proxies , i need to configure some specific traffic with source and destiantion to internet to byepass from this loadbalancing and directly got to outside interface .
i already created a vpn server on my 878 router.. so that i can connect with ip-sec (cisco vpn client) to this router and network..
all working great... however... when i also want to allow multicast traffic over my vpn connection. do i then need a GRE vpn? or what?or is this only needed when you use a site to site vpn..?And how can i enable this?
I need to block incoming traffic with Dlink DIR 600. I know how to create the rule source (WAN) to destination (LAN) to deny all protocols. But what IP will I put in WAN? IP address of my Internet? Or how can I enter the ALL IP range in source...format for the IP (it's not 0.0.0.0).
I want to do this because in the DIR log section I'm being PING Flooded. I already un-check "Enable WAN Ping Response" but still receiving the message.
My laptop running Windows 7 has been fine until this holiday, connected to a hotel wifi that "trapped" the broswer and requested a login and password. That worked fine, but now I cannot access any other wifi networks.It sits for a while after entering the code and then has limited access, running the troubleshooter it says that I have no valid IP address?Tried IPCONFIG /RELEASE and it is saying "No operation can be performed on Local Connection 2 while it has its media disconnected"
View 8 Replies View Relatedi'm getting invalid ip address during connection to nearby wireless network
View 1 Replies View RelatedDoes ASA 8.4.3 check the source IP address of a DNS reply and drop it if the reply address is different to that in the query?
Customers DNS server does this due to a recent change, their server now has a virtual address, but replies are sent from its physcial address. This is temporary. Their PIX is happy with this.
Replace the PIX with the ASA, DNS fails, the only reason I can see is due to the way their internal DNS operates.
I have a server in a DMZ of my 8.4 ASA with nat:
object network FTP-SERVER
host 192.168.1.102
nat (dmz,outside) static interface tcp ftp ftp
And that's working well. However, I now need to translate the source address of connections from the outside to the FTP server as well. The aim is that the source address of packets when they reach the FTP server is an address on the DMZ subnet (as the default route for the FTP server now needs to be something else, not the ASA) as well as this outside-dmz NAT. I thought overloading the DMZ interface of the ASA? Or another IP in that range?
howdy,im having trouble with my LAC.it just keeps identifying.i have tried everything,uninstall/reinstall, netsh winsock reset,netsh int ip reset,disable/enable.windows diagnostics comes back with invalid ip address,and modem hardware failure.device manager lists the network adapter as working,yet it doesn't here's my ipconfig[CODE]
View 5 Replies View RelatedI have a 7" netbook but won't connect wirelessly it comes up invalid ip address
View 2 Replies View RelatedI installed the 2.06NA on my DIR-655 router and now I'm having problems adding mac addresses to the network filter. The message is "Invalid MAC address". Of course, it doesn't tell me which entry is invalid and I have a number of them. After further checking.. I noticed that one of the MAC addresses is indeed invalid and when I remove it I still get the error message?
View 1 Replies View RelatedI am unable to reserve an IP for my iPad, i.e. add my ipad to the "DHCP RESERVATIONS LIST". I get a pop-up saying "The MAC Address entered is invalid." The address starts with "D8". My understanding is most start w/ "00". The router says my firmware is up-to-date (3.01).
View 11 Replies View RelatedI had no problem running both 2.4 and 5.0 Bandwidth. With WiFi password and without. It does it's job. The 2.4Ghz Range Plus works. I have set up the router on the 2nd floor at the highest it can go. And everyone get's full bars all over the house. I even get 4-5 bars outside in my car on my phone.
The only issue I have with this thing is a damn new netbook I got for Christmas with a Mac Address starting with 0C-EE-E6-XX-XX-XX. The Router finds the Mac Address invalid. In which I can come to understand cause seeing a Mac Address starting like that is completely new to me. Every Mac Address I have, started with 00 except the netbook. So now, I spent days trying to find firmware updates, patches, anything! I even attempted to spoof the Mac Address on the netbook but Microsoft has a bug on Windows 7. (I have the Starter Edition that came with the netbook)
Windows 7 Mac Spoofing works with WIRED Connection. But it does not work with WIRELESS Connection. I used 3rd Party Tools: SMAC and etc... I attempted Registry Edits, I changed even the value key to the "Orginal Mac Address" and it just wont change [New Strings/Network Address Edits included]. I have been banging my head about this for a week now. The Internets has many answers but they did not work. So Spoofing the Mac Address is out of the question. Until Microsoft fixes this bug.
Anyway: Did D-Link release any sort of beta update/driver/firmware or anything to resolve this at all? Is there a modded firmware to force the Router to take this stupid paradox of a Mac Address?
Currently: I have the Router's WiFi Password-ed with Default Factory Settings
{Hardware Version: B1
Firmware Version: 2.02NA}.
Issue: When I attempt to save the changes I made to the DHCP reservation list I get an error window that reads:
http:\201.201.201.201 (my internal router IP address - changed from 192.168.0.1)
Host name Invalid I have a DHCP Range setup as 201.201.201.100 to 201.201.201.199
I'm attempting to reserve an IP address of 201.201.201.199 for one of the computers on my network.
I can see the computer on the dir825 router and am connecting to it through a linksys wrtgs working as a repeater bridge running dd-wrt. The computer in question is successfully getting it's IP address from the dhcp server on the dlink router.
The dir825 is running 2.05na firmware. Why am I unable to reserve an IP address?
i would like to monitor traffic between multiple source ports to multiple destination ports on a nexus 7k. i lknow when you set up monitor session is between source and destination (laptop or traffic analyser) but is there a way i can set up between source and multiple destination ports and capture that traffic ?
View 3 Replies View RelatedI've configured the ACE4710 to bring the logging to a syslog server! Here's the configuration
[...]
logging enable
logging fastpath
[Code]....
I saw to log with connection on the syslog server but It would be interesting to know the "source ip address" and my question is : It may be possible to configure for the logging a kind of "transparent pass through"?
i would like to use the ACS 5.3 as TACACS Proxy. Basically it works. But when checking the logs on the destination TACACS Server (ACS 4.2) i see that all requests (Source-NAs) came from the IP of the TACACS-Proxy. Not from the original source IP.
This is useless for my scenario, because on the destination TACACS Server the policies are built on the NetworkDevices Groups and AAA Clients = source IPs.
I'm using a 2911 as our Public Internet Edge Router. I have 2 public sub net blocks from Sprint, we are in the process of migrating. What i need to do is NAT any source address from the Internet from an address on one of our public blocks to the other.
Example:
Source Address 11.10.10.10 ==> Destination 64.165.123.10 (nat this to 64.165.54.10) inbound.
So if from the internet tries to hit 64.165.123.10 we want to nat that to 64.165.54.10 both of which sit on our public space.
I have a problem with random host's geting the wrong source address on a ASA 5512-X 8.6(1). Right now there is a host, 192.168.25.108, showing up with 6.6.6.6 (fake) on whatsmyip.org, should be 5.5.5.5 like the rest of 192.168.25.0/24. In the xlate tabel I cant find anything wrong. Same yesterday with two host, that are using the right NAT address today.
nat (any,outside) dynamic interface. (5.5.5.5)
object network H-192.168.25.10
nat (inside,outside) static H-6.6.6.6X(code)
I'm stuck with some NAT issues. I've got an 800-series router wich connects to the internet via a PPP connection (dialer0). On the inside the router has 192.168.0.253/24 as IP address, the outside is negotiated with the ISP
My mailserver has the ip address of 192.168.0.1 but with default gateway of 192.168.0.254 (primary internet connection). If I use plain NAT (ip nat inside source static tcp 192.168.0.1 25 interface Dialer0 80) the packets arriving on the mailserver do have a public IP address as source address.
Would it be possible to rewrite those packets (source address) so they have 192.168.0.253 as source address. This way the mailserver won't send the replies to it's default gateway but back to the cisco router.
I have a 3560X switch with interfaces 36-48 on the same LAN. All interfaces are switchports. Hosts on 38, 39 and 40 are multicast senders: all sending to the same single multicast address. Hosts on 36 and 37 are receivers, having joined that multicast group. I created an SVI for the LAN and put it in ip pim passive. (That is the only PIM mode allowed for an SVI with my IOS.) Show ip igmp snooping groups shows that 36 and 37 are the only interfaces in this group. I attach a laptop to interface 42 and Wireshark, and the laptop is receiving the multicast traffic. The laptop does not join the group. I expect it would not see the traffic.
View 4 Replies View RelatedI'm tryng to configure a vpn with a cisco small business pro router, model srp527W-k9-g5 But when i try to set the “remote ip” in Remote traffic selection a I have to set (10.0.0.0) a message said:
“Invalid IP Address Format”
If i change the ip and i put 10.0.0.1 i have not error but I have to put 10.0.0.0 and if i configure it on a cisco WRV210 (por example) i have no error.