Re: OT - Layer 2 Switch

From: Tony Singh <mothafungla_at_gmail.com>
Date: Mon, 15 Jul 2013 23:14:45 +0100

FW is the DHCP server?

Is DHCP snooping running on the switch as a security feature check the bindings

Else Packet sniffing is what I'd be doing

--
BR
Tony
Sent from my iPad
On 15 Jul 2013, at 22:56, Jay McMickle <jay.mcmickle_at_yahoo.com> wrote:
> Would a debug IP packet work here, even with the wrong layer 3 address (since it's unknown) on the VLANx (newly created) local to this switch?
> 
> Trying to think outside of the box here. Please join! (CCIE craziness, I know)
> 
> Regards,
> Jay McMickle- 2x CCIE #35355 (R/S,Sec)
> Sent from my iPhone 5
> 
> On Jul 15, 2013, at 2:53 PM, Mohammad Mousa <mohd-mousa_at_hotmail.com> wrote:
> 
>> Jay,
>> 
>> I think he doesn't know the subnet of this VLAN. So he can't put an IP for the VLAN interface from the same subnet, unless he want's to guess :-)
>> 
>> I thought the same as you did =>
>> 
>> 
>> Sent from my iPhone
>> 
>> On Jul 15, 2013, at 3:47 PM, "Jay McMickle" <jay.mcmickle_at_yahoo.com> wrote:
>> 
>>> Create a VLAN interface on the same VLAN that all the hosts are on, with an IP address on the same subnet.
>>> 
>>> You can then ping the broadcast network (assuming proxy-arp isn't disabled on the VLAN interface) and then sh ip arp.
>>> 
>>> Regards,
>>> Jay McMickle- 2x CCIE #35355 (R/S,Sec)
>>> Sent from my iPhone 5
>>> 
>>> On Jul 15, 2013, at 2:25 PM, Eduardo VC!zquez <evazquez_at_gmail.com> wrote:
>>> 
>>>> put a host on the same subnet and use nmap to ping all of them.  show the
>>>> arp table on that host.
>>>> 
>>>> 
>>>> On Mon, Jul 15, 2013 at 1:50 PM, gaston brait <gbrait_at_hotmail.com> wrote:
>>>> 
>>>>> I have been searching for a while and haven't found any answer.
>>>>> I have several hosts connected to the switch and they all belong to the
>>>>> same
>>>>> vlan.I don't know the ip address of these hosts, but have the mac
>>>>> addressess.
>>>>> The default gateway for the switch is a FW which I don4t have access to
>>>>> Is there anyway to get the ip address of these hosts?
>>>>> show ip arp won't help
>>>>> Regards,
>>>>> Gaston
>>>>> 
>>>>> 
>>>>> Blogs and organic groups at http://www.ccie.net
>>>>> 
>>>>> _______________________________________________________________________
>>>>> Subscription information may be found at:
>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>> 
>>>> 
>>>> Blogs and organic groups at http://www.ccie.net
>>>> 
>>>> _______________________________________________________________________
>>>> Subscription information may be found at: 
>>>> http://www.groupstudy.com/list/CCIELab.html
>>> 
>>> 
>>> Blogs and organic groups at http://www.ccie.net
>>> 
>>> _______________________________________________________________________
>>> Subscription information may be found at: 
>>> http://www.groupstudy.com/list/CCIELab.html
> 
> 
> Blogs and organic groups at http://www.ccie.net
> 
> _______________________________________________________________________
> Subscription information may be found at: 
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Mon Jul 15 2013 - 23:14:45 ART

This archive was generated by hypermail 2.2.0 : Thu Aug 01 2013 - 08:45:50 ART