Rogue Hub/Switch blocking?

Hello,
I've noticed MAC addresses with a 0000.0000.0000 on some of our switch ports in a particular building. It turns out some end-users were plugging in personal/unauthorized hubs and/or cheap 5-port switches into our network on those interfaces. We manually disabled the ports, then sure enough the end-users called the helpdesk informing us they lost network connectivity.
Portfast and BPDU guard is enabled all edge devices. However, since these are cheap hubs and switches I don't think they are even doing STP. So having BPDU guard err-disable the port isn't our fix.
So, is there another way to block these devices? ACL? MAC filtering? Can you just block MAC 0000.0000.0000? Maybe someone can explain what MAC 0000.0000.0000 means?
I'm aware of port security, and that is in the works currently, but was hoping for a quick fix in the meantime.
Thanks!
-Brett

Depending what kind of switch you have, you may have dynamic arp inspection, where you register only trust mac on the switch database and the switch will discard any other mac connecting. Port security is another option, allow a max of 1 mac on the port, but the problem will persist that if connect a hub + computers, the port will get shut down and you have to reactive the suspended port each time.
Here is also a good post to review for an ACL
https://supportforums.cisco.com/message/3727181#3727181
-Tom
Please rate helpful posts

Similar Messages

Anyone with experience using a Fosmon 3-way HDMI Splitter Hub Switch Port Cable Cord?

Would like to feed my new MacBook Pro laptop and an existing Dell Latitude laptop into the same 25" Hanspree HDMI monitor. Appears that the above Fosmon 3-way HDMI splitter Hub Switch could work since the input feed is manually selectable on the Splitter Hub. Before purchasing this and accompanying cables, has anyone had positive experience with use of this Splitter?
Cajun4ISU

Yes, you can connect an HDMI monitor directly up to a 2011 using an HDMI cable.
Look at > http://manuals.info.apple.com/en_US/mac_mini_mid2011_ug.pdf in Chapter 1 on Page 15 of the User Guide.

Hub/Switches Operating Temperature

I am looking for a hub/switch that can work on a temperature 60-70 deg C. Appreciate if you can provide me the model name if it is available.

hi! alsmot all Linksys switches has an operating temperature/humidity of 0ºC to 40ºC / 20% to 95% relative humidity, Non-Condensing with the exception of SLM224G, SLM248G, SLM2024, SLM2048, SLM224P and SLM248P which has 50C, 90% (operating temperature/humidity)

Mysterious anonymous inner class in switch block

public class MysteryFile {
public enum Elements {
    WIND, EARTH, FIRE, WATER
Elements el;
public MysteryFile(Elements el) {
    this.el = el;
public void whatIsItLike() {
    switch (el) {
      case WIND: System.out.println("A bit chilly sometimes"); break;
      case EARTH: System.out.println("Gets hands dirty."); break;
      case FIRE: System.out.println("Hot! skin melt"); break;
      case WATER: System.out.println("Cool! clean hands"); break;
      default: System.out.println("Don't know"); break;
public static void main(String[] args) {
    MysteryFile anElement = new MysteryFile(Elements.FIRE);
    anElement.whatIsItLike();
}When compiled in Netbeans or in the command line, generates an unexpected MysteryFile$1.class file. If the entire switch block is commented out and recompiled, it does not get generated. Where does this anonymous inner class come from?

The MysteryFile$1 class looks something like this (javac 1.6.0_02):
class MysteryFile$1 {
static final int[] $SwitchMap$MysteryFile$Elements;
static {
      // the line number (debug info) of this static initializer
      // is "switch (el)" line in MysteryFile.java
      $SwitchMap$MysteryFile$Elements =
              new int[MysteryFile$Elements.values().length ];
      try {
          $SwitchMap$MysteryFile$Elements[
                  MysteryFile$Elements.WIND.ordinal() ] = 1;
      } catch (NoSuchFieldError e) {
          // fix stack?
      // repeat with EARTH(2), FIRE(3) and WATER(4)
}... and the actual switch statement in 'MysteryFile' looks like so:
//switch (el) {
switch(MysteryFile$1.$SwitchMap$MysteryFile$Elements[
          this.el.ordinal() ])
case 1: // WIND
      break;
case 2: // EARTH
      break;
case 3: // FIRE
      break;
case 4: // WATER
      break;
default: // ...
}I suppose this is necessary because the compiler can't guarantee that the runtime enum-constant-to-ordinal mapping will be identical to that at compile time (the API docs say it depends on the declaration order in the source code, which I think may change without breaking binary compatibility).
PS MysteryFile$Elements.values() is a synthetic method that returns all enumeration constants in a MysteryFile$Elements array. Found this old related thread: [http://forum.java.sun.com/thread.jspa?threadID=617315]

Finding "rogue" hubs and switches

I haven't had a need to find this until this point but does Campus Manager have anything in it to show where non-Cisco switches and hubs of any kind may be appearing on the network? Would this be buried in the Discrepancies reports somewhere? Short of analyzing end-host reports for multiple MACs on ports, I can't seem to find if CM can do this.
thanks!

Campus Manager only works for Cisco related devices but you might be able to get the results you are looking using user tracking report generator.
Rogue Reports:
1. Go to Campus Manager --> User Tracking --> Report Generator
2. Select MAC report for first column and "rogue mac" for the second.
3. Run the reports.
Ports with Multiple MAC:
1. Go to Campus Manager --> User Tracking --> Report Generator
2. Select DUPLICATE reports for first column and "Ports with multiple MAC" for the second.
3. Run the reports.

Why is 2960 switch blocking one pc?

I have port security configured on the switch with no STICKY mode. Many computers can connect on that switch and DHCP works well, but a particular win8 laptop gets blocked immediately when I connect to that 2960. I have a second 2960 and the same pc can connect with DHCP no problem.
Jason

Yes, I have the same Port Security setting across the entire switch except the router on a stick line. I have each port with max 5 Mac addresses except cascade line to switch 2.

Receiving events from event hub was blocked.

In our Cloud Service project, we have 2 instances for work role (deploy to Azure), the work role is consume events from the EventHub using EventProcessorHost(host name is RoleInstance name).
For sending events:
    var
client = EventHubClient.CreateFromConnectionString(serviceBusConnectionString,
hubName);
while (true)
var eventData =
new
EventData(Encoding.UTF8.GetBytes("test"))
{PartitionKey = "key"};
                    eventData.Properties.Add("time",
DateTime.UtcNow);
                client.SendAsync(eventData).Wait();
                Thread.Sleep(50);
Each 50ms, we send one event (event1, 2,3 …….);
For receiving data:
public
async
Task ProcessEventsAsync(PartitionContext
context, IEnumerable<EventData>
events)
            //when
we get the event, so we can view the log
Trace.WriteLine(“got events”);
foreach (var
eventData in events)
                // handle the event
Task.Delay(12000).Wait();
await ContextCheckpointAsync(context);
We add the
delay for event operation.
It seems that we cannot receive data in time from the log, seems event6 was blocked for the Event5 delay, after the 12ms, we can receive event6 from the EventHub, and the Event6
delay is 40s(from the log, we send event6 to Hub at 35:10, but we get from Hub at 35:50),
So I wonder to know the maximum number of threads are working on processing fot the EventProcessorHost? Depends on the Partitions?
And is there any way to receiving events in time?

Hi Jordan
Since Task.Delay call blocks the callback, host won't hand over new events until you're done with the current batch. This is due to order guarantee of the events delivered, i.e. host should process the events in order from the same partition.
If event process is taking so long then you should consider to move process job into a separate thread so host can deliver new batch of events while thread is working on the previous batch.

Silent switch blocks incoming call when toggled

Hi,
Just got a call in a restaurant, phone rang with all bells and whistles and then quickly set the switch to SILENT on my iphone 6. That call got dropped/blocked whilst it was ringing. So i thought i was called and coincidentally the other end put down the phone. Later on it happened again, so my suspicion was raised there might be something going on with IOS 8.3.
Can someone try this as well? Let someone ring you, and while your phone is ringing. Toggle the SILENT/mute button to ON.

It sounds like you bogged the system down a bit, and saw some "lag." How many cards did you have open and with each doing what (ie, were any of the sites you were at large pages, lots of graphics, lots of javascript embedded, etc, etc)
Can you re-produce this and if so, what are the exact circumstances?
Thanks.

Home hub switch on/off?

Ive read that the small plug in wall transformers that power mobile phone chrgers etc & the bt home hub are a source of fire. Should I always switch off whin Im not using my computer? ( I always do actually!) & if this is correct, how would anyone be able to sit in their car outside my home & connect using BT fon via my home hub?
Im actually bemused by the idea of this anyway as I cant connect to a laptop in another ROOM within my house let alone sit in a car in the road outside & get a wifi connection! LOL!

somersetbob wrote:
As for losing access to FON/BT Openzone if you opt out, this is not the case, it just means your hub won't be transmitting an Openzone/FON hotspot so you and anyone else wouldn't be able to connect to your hub through FON/Openzone. You'd still connect to your personal Wi-Fi connection and you'd still have access to other hotspots as part of your BT contract.
If you don't get a good signal whilst at home try setting a manual channel on the hub or moving the hub to a different location (if practical).
I you opt out of BTFON then your hub will no longer transmit the BTFON/OPENZONE wifi signal but by opting out you will no longer be able to access BTFON/OPENZONE when out and about, You can still access any free hotspots provided by coffee houses/hamburger shops etc
If you like a post, or want to say thanks for a helpful answer, please click on the Ratings star on the left-hand side of the post.
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

Airport Express Confusion - Hubs, Switches, Router

I am totally frustrated with trying to get my Airport Express to work. I have an older dual-processor G4 WITHOUT an airport card. It is connected to a 4-port Fast Ethernet Hub (Netgear FE-104). Also connected to the Hub is a cable modem and Laserjet printer. When I ordered my new MacBook Pro I asked the Apple sales rep if I could access the internet on the MacBook Pro in another room. I explained exactly the specs above. I asked if I needed an airport card in the G4 and he said no. He recommended ordering an Airport Express (not Extreme) and said to connect the Airport Express to the Hub with an Ethernet cable. I did that and tried and tried to get both computers to access the internet. Nothing worked. I called Apple Tech Support and the very patient guy went through the whole process but told me to connect the Airport Express directly to the cable modem. Well, that defeats everything I am trying to do. He could not get both computers on the network. I called the Apple rep back and he thought there might be something wrong with the AE so I exchanged it. He said I do not need an Airport Extreme, but the Tech Support guy said I did. I hooked the new AE up again as he first suggested...into the HUB. I can only access the internet (one computer at a time) if I plug into the Link/RX Port (only one of these on the HUB). I'm not a network expert but everything on apple.com says this is supposed to be easy to connect 2 computers and use both on the internet simultaneously. I read in DesigningAirportNets.pdf on page 28 that an Ethernet hub is optional. That's what I have. Can anyone help me figure out why this isn't working? I have a HUB but do I need something else? Is Apple's documentation wrong? Isn't the Airport Express a little router? Or is it a Switch? I'm sorry to make this so long but I've spent a ton of hours trying to get this to work. If I bought an Extreme it's not a hub and I can't connect my G4 or printer to it. Thank you for any help.
G4 dual processor + MacBook Pro (1 month old) Mac OS X (10.4.6)

He recommended ordering an Airport Express (not Extreme)...
That was bad advice. Your original setup using a hub to connect multiple devices to your cable modem is troublesome and destined to failure.
He said I do not need an Airport Extreme, but the Tech Support guy said I did.
The "Tech Support guy" was correct.
Isn't the Airport Express a little router?
Yes but since it only has a single Ethernet port, it can not connect to your Ethernet Internet source AND support Ethernet clients at the same time.
You have 3 choices:
Return the AirPort Express and get an AirPort Extreme base station (AEBS). Then you will configure your network like this:
cable modem-> [WAN] AEBS [LAN]-+-> G4 DP
...............................|-> Laserjet
In that configuration the AEBS will properly share the connection between the Ethernet devices and your MacBook Pro.
OR...
Replace your hub with an inexpensive wired router. Then configure your AirPort Express so that the option to distribute IP addresses is disabled. You will configure your network like this:
cable modem-> router-+-> G4 DP
.....................|-> Laserjet
.....................|-> AirPort Express
In this configuration, the AirPort Express will act solely as a wireless access point. All of your machines will get IP addresses directly from the router.
OR...
Return the AirPort Express and get an inexpensive 802.11g compliant wireless base station. You will configure your network like this:
cable modem-> wireless router-+-> G4 DP
..............................|-> Laserjet

Home Hub Phones & blocking calls from a particular...

I have a BT Home Hub 1.5 and the Hub Phone. Is it possible to block, or blacklist one phone number, so as it cannot call my hub phone?
I tried saving it in the phone book & allocating a ring tone of "None" but it still rings. I have also looked under Advanced in the web interface for the home hub, but cannot see anything there either.

Hi KeithAFrench,
If you take a look at the link Choose to Refuse, you will find some information on calling feature and this could help you to block calls from that number. Let me know if you still have any question regarding this service.
Cheers
Paddy,
BTCare Community Mod
If we have asked you to email us with your details, please make sure you are logged in to the forum, otherwise you will not be able to see our ‘Contact Us’ link within our profiles.
We are sorry but we are unable to deal with service/account queries via the private message(PM) function so please don't PM your account info, we need to deal with this via our email account :-)

Hubs/Switches - whats the difference.

Hello on my home network I have a WRT54GS Router that feeds a 16 port Workgroup Network switch EZXS16W which feeds all my upstairs machines, feeding off this is a length of networking cable which powers a Linksys EZXS88 8 Port Workgroup switch this feeds my 360's Xbox1 and MCE Extenders & Linksys WAP54G all on the bottom floor.
I find that this works well as I have the wireless router on one side of the house and a WAP54 access point on the other, so wireless is covered all over the house.
Ok so now that you have an idea of what I'm doing heres the problem, I need to run another network cable into next doors house, (dont worry we own it) and on the end of that wire I want to fit another switch so that I can then route network cables all over that house. I ordered my switch, but did not look properly at the site and ordered a HUB instead of a SWITCH. The item in question being a EFAH08W, I have looked at the specs from here :-
http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FLayout&cid=1115416836266&...
and here
http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FLayout&cid=1115416836813&...
But I dont know what the difference between the two really is, and can I attach this hub without any performance loss. This section is to power more MCE Extenders and to stream Divx to PC's MP3 ect Basically the same as in the other house.
Regards
Ump..

to put it simply, a hub sends all the data to all the ports and its up to the node to figure out which data is for it. a switch sends the data to the specific port that the data is supposed to go to.
its kinda like the difference between mail that is addressed directly to you vs junk mail that goes out to everyone.
theres some other details and so forth but I hope that makes sense.
http://www.airspaceonline.com

Forms 4.5 crashing when switching block

Hi, I was wondering if anyone had any advice on this problem. I'm using forms 4.5 and when the form is loading, if someone switches from the master block to the detail block the application crashes. The master block takes a few miliseconds to populate but if anyone tries to switch to the detail block during this population the application freezes and then crashes with an error.
Is this likely to be a bug in my coding or is it something I would need to get a patch for? Can anyone suggest a way to handle this error so the form can continue without errors?
thanks,
Ross

"crashes with an error" --- which error ?
which database are you working with? 7 or 8 ?

PXI-2800 Switch Block Register Level Programming

I have a PXI-2800 with 2815A and B wand was wondering if there are RLP specs that I can drive with the Linux NIMHDDK?
I have been successful with the Switch RPL, and was thinking this would be an extension. That does not appear to be the case, this card is a bit different.
Thanks

I'm a few steps down the learning curve from plosio so bear with me here. I'm trying to control a pair of PCI 6259 multifunction cards which live in a mac (G5, OS X 10.4.4) using the NI-VISA package and xcode. I have run the driver wizard, and put the inf file it created where the inf file said it wanted to go, and modified the find-resource example code so that the PCI macros get defined. Still the viFindRsrc function can't find my cards. I know they are there because mac's system profiler can see them. one thing that makes me nervous is that inf file lists WindowsNT for the operating system. Another thing that makes me nervous is that i was under the impression that the wizard was also supposed to make new VISA readable drivers (.kext files if i am not mistaken) for each card, and I don't see any new kernel extensions when I search the hard drive. Thanks in advance for any help.

Hub Transport blocking internal email messages (sometimes)

I have three Xerox WorkCentre multi function devices that are configured to send scans to my domain.local accounts. Around mid November we started getting error messages (sometimes) that the scans we rejected. Xerox tech support told me that it was something
within my network (exchange) that was rejecting them. The two most common errors we receive are "Completed with an Error (016-513): SMTP server reception error and (016-764). Nothing can be found on Xerox to nail down an exact cause. I have checked the
account information used for the devices.
Can you tell me where to check in Exchange to see exactly what is going on with this?
Thanks in advance.
Randy
RSG

Hi,
Any update?
Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Andy Qi
TechNet Community Support

Rogue Hub/Switch blocking?

Similar Messages

Maybe you are looking for