Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 1172 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

MAC Adress Flip-Flop???

equinox
Hi everybody!

I'm using Astaro 1.8 with four NIC's,
but the fourth (DMZ) card was inactive for
some time. Now, since all four card
are used, i'm sometimes getting the mac
address of the dmz-card on the internal
net. Arpwatch:

   hostname: intranet.domain.com
          ip address: 192.168.119.126
    ethernet address: 0:x:yy:zz:fb:ec
     ethernet vendor: 
old ethernet address: 0:x:yy:zz:92:ba
 old ethernet vendor: 
           timestamp: Wednesday, August 29, 2001 7:45:00 +0200
  previous timestamp: Wednesday, August 29, 2001 7:45:00 +0200
               delta: 0 seconds

After a few seconds, i'm seeing a change to
the correct adress:

   hostname: intranet.domain.com
          ip address: 192.168.119.126
    ethernet address: 0:x:yy:zz:92:ba
     ethernet vendor: 
old ethernet address: 0:x:yy:zz:fb:ec
 old ethernet vendor: 
           timestamp: Wednesday, August 29, 2001 7:45:05 +0200
  previous timestamp: Wednesday, August 29, 2001 7:45:00 +0200
               delta: 8 seconds

:ba is the real intranet nic, :ec is
the dmz nic. Obviously, this is not
good, i can't even ping the firewall from
the intranet 'til i'm getting the right
address again    [:(] 


Any ideas?


Greetings!

[ 29 August 2001: Message edited by: equinox ]


This thread was automatically locked due to age.
  • 0
    do you have proxy ARP activated somwhere ?

    or do you have connected more than one NIC to the same switch/hub (so, is there a way "around" the firewall ?) ?  [:)]

    /tom
  • 0 in reply to tom_01
    Hello Tom,

    >do you have proxy ARP activated somwhere ? 
                               
    ehhh, proxy ARP  [:S]t,
    i thought it's not possible at all.

    >or do you have connected more than one NIC
    >to the same switch/hub (so, is there a way
    >"around" the firewall ?) ?

    Not really    . The Intranet is connected
    to a switch for the "surf-pc's", but
    the so-called dmz is a cross-cable
    to the webserver, no switch or any other
    connection to the intranet  [:S].


    Greez!
Unfiltered HTML