Solved

cisco switch voodo

Posted on 2013-11-15
9
589 Views
Last Modified: 2013-11-17
I had my layer 2 netgear switches replaced with layer 3 cisco managed switches and for the most part everything pings everything, except for one windows 7 workstation that can ping everything but nothing can ping it, see it, share with it...  when I had the dumb netgear layer 2 switches everything worked.  Anyone have a clue why a machine that worked before, when put into a cisco based managed switch network would all of a sudden loose the ability to be seen on the network, yet at the same time, it can see everything on the network?

Topology - 10/100/1000 L3 SW -> 10/100 L3 SW -> Cisco Router
Might be :
10/100/1000 L3 SW -> Cisco Router -> 10/100 L3 SW, I'd have to look, if it matters...

The 10/100 L3 SW and the Cisco Router have gig ports.  On the 10/100 there are 4 uplink ports.  On the Cisco Router, the ports are gig.  Plugging the workstation into either the gig uplink on the switch or the gig port on the router results in this behavior where the workstation sees the network ok, but nothing on the network can see it.

Thanks,
gsgi
0
Comment
Question by:gsgi
  • 4
  • 2
  • 2
  • +1
9 Comments
 
LVL 1

Expert Comment

by:justind39
ID: 39652821
Can you ping that computer from the switch?
0
 
LVL 13

Author Comment

by:gsgi
ID: 39652824
nope.  not from the switch or the router, regardless of whether the workstation is plugged into the switch or the router.

it's voodo!

thanks!

gsgi
0
 
LVL 1

Accepted Solution

by:
justind39 earned 500 total points
ID: 39652832
Ok I assume that the ip address of the Win7 is on the same subnet as the others and that the firewall is off.  Do you have any Norton Security or anything similar?
0
 
LVL 13

Author Comment

by:gsgi
ID: 39652839
Same network and subnet, yes.  No firewall software, norton or anything that I can think of but I will double check in the morning.  Even if that software exists, a change from a L2 switch to a L3 switch should not cut off communication to this workstation.  All we did tonight, was add a L3 switch to this network, the first one (leftmost) in the topology diagram I sent.  Oh, and we replaced a cisco router with a different cisco router.  But, this workstaion has been in the gig port of the L3 10/100 switch for three weeks.  So what could possibly cut off communication back to it???  The fact that it can ping, and receive the successful ping traffic back is interesting because other than that it seems like it is not on the network... weird!!!!!
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 38

Expert Comment

by:Rich Rumble
ID: 39652840
Time to get wireshark installed on the win7 and see if traffic is getting to it, and if's responding. If traffic is coming in, but no machine response, then it's a firewall. You may also check your switch logs, there could be a connection issue/bad port/ severe packet loss et.c.. Also note that 3rd party AV often comes with it's own firewall, make sure you have all firewalls disabled for your testing.
-rich
0
 
LVL 45

Expert Comment

by:Craig Beck
ID: 39653332
Can you post the config from the Cisco switch?  I'm guessing it's because the PC is connected to a trunk port which isn't configured (properly).
0
 
LVL 38

Expert Comment

by:Rich Rumble
ID: 39653367
Redact/Remove any passwords/hashes or public IP's if you do post a config.
-rich
0
 
LVL 13

Author Comment

by:gsgi
ID: 39654012
This turned out to be a firewall issue.  Even though this workstation was already in this switch and happy, and even though we didn't change the network subnet or ip addresses or anything else, windows 7 sees it as a new network.  I set it to "work" and it was OK, but upon rebooting it goes back to public.  I have no idea why.  Anyway I just totally disabled the firewall for both public and home/work in the windows 7 config area and it is ok now.

Thanks,
gsgi
0
 
LVL 13

Author Closing Comment

by:gsgi
ID: 39654015
Thanks!
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now