- Community Home
- >
- Networking
- >
- Legacy
- >
- Switches, Hubs, Modems
- >
- IP-Range on a Switch
-
- Forums
-
Blogs
- Alliances
- Around the Storage Block
- Behind the scenes @ Labs
- HPE Careers
- HPE Storage Tech Insiders
- Infrastructure Insights
- Inspiring Progress
- Internet of Things (IoT)
- My Learning Certification
- OEM Solutions
- Servers: The Right Compute
- Shifting to Software-Defined
- Telecom IQ
- Transforming IT
- Infrastructure Solutions German
- L’Avenir de l’IT
- IT e Trasformazione Digitale
- Enterprise Topics
- ИТ для нового стиля бизнеса
- Blogs
-
Quick Links
- Community
- Getting Started
- FAQ
- Ranking Overview
- Rules of Participation
- Contact
- Email us
- Tell us what you think
- Information Libraries
- Integrated Systems
- Networking
- Servers
- Storage
- Other HPE Sites
- Support Center
- Enterprise.nxt
- Marketplace
- Aruba Airheads Community
-
Forums
-
Blogs
-
InformationEnglish
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-30-2003 02:31 AM
06-30-2003 02:31 AM
IP-Range on a Switch
because i want the plugged users to use no other IP then thoe in this IP-Range.
if not how can i find a user in a 400 computers network who has an other IP (i want to know on witch port on the Swqitch he is plugged in)
I hope my english is good enough to understand my Question.
Thank you for your help
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-30-2003 11:22 AM
06-30-2003 11:22 AM
Re: IP-Range on a Switch
But you can, for example, et up VLAN, which will mean that each port will be assigned to a ALN for which you will decide of mask. A PC with another IP won't be in the network.
The depending on how manageable is your switch, you can use access lists to forbid those 'outside network' computers to have any access.
I do not know which is your switch, but read some configuration examples at :
http://www.hp.com/rnd/support/config_examples/93xx_6308.htm
hth
J
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-30-2003 11:34 AM
06-30-2003 11:34 AM
Re: IP-Range on a Switch
Unless you are dealing with a hacker the easiest way to fix the problem is to have your router guy put a filter on which only allows your chosen range of ip addresses to get through. Eventually you will get a trouble report from the culprit saying he can't get to the internet.
Usually it would be a two step process to discover your culprit unless your switch is a layer three switch. What you do is ask your router for its arp table. Search through the arp table until you find an unauthorized IP address and then note its MAC. Then go to the switch and search through its forwarding table until you find the MAC address. That will give you the port address.
Alternatively you can use a tool like getif (windows based http://www.wtcs.org/snmp4tpc/getif.htm) to scan the network. It just sends out a ping to every address in a range of addresses and reports back on which ones answer. Snort (an intrusion detector http://www.snort.org/) could also be used to look for any addresses which were not in the correct range but you would have to have your switch set correctly for it to work.
HP's Toptools which comes with HP switches apparently has some way of connecting IP addresses to MACs. Never used it so can't say for sure.
Ron
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-30-2003 12:04 PM
06-30-2003 12:04 PM
Re: IP-Range on a Switch
1st thank you for the fast help.
i will use Hewlett Packard ProCurve 2524M
and as a backbone Hewlett Packard ProCurve 4108GL
i think or better i hope with this components my vision will work ;)
do i understand right?
i can't block ranges of IP's?
because i want the Users to stay in a special Range so i could find them faster.
What is with HP OpenView will this works or is getif better?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-30-2003 12:33 PM
06-30-2003 12:33 PM
Re: IP-Range on a Switch
You can't MAKE people stay in a range, but you can prevent people 'out of the range you want' to access the network, thru Access list.
On 2524, it is perfectly possible. Read
ftp://ftp.hp.com/pub/networking/software/59692354.pdf
(beware, heavy file, get list from
http://www.hp.com/rnd/support/manuals/23xx_25xx.htm
Openview an getif are not of the same kind ! Getif is used to scan the network and get a reply, letting you know which IP are on the network, Openview is a full featured management software, far more powerfull (and expensive !).
With these access lists, you will undoubtedly force people to stay in the range you wish, as they will have no network if they are out of it !
Thanks to assign points if all this is useful to you, that's how Ron and I are fed !
:]
J
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-30-2003 10:40 PM
06-30-2003 10:40 PM
Re: IP-Range on a Switch
thanks for help. I ask a second time if i have probs with the configuration.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-30-2003 10:49 PM
06-30-2003 10:49 PM
Re: IP-Range on a Switch
You'll see it's not very hard !
Ask if required !
Good luck
J
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-01-2003 11:36 AM
07-01-2003 11:36 AM
Re: IP-Range on a Switch
Ron
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-02-2003 02:05 AM
07-02-2003 02:05 AM
Re: IP-Range on a Switch
could i ask you if i have problems setting up getif?
I think i will find manuals in the net but if i wouldn't success i will ask.
Thx
Daniel
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-02-2003 03:51 AM
07-02-2003 03:51 AM
Re: IP-Range on a Switch
You'll see it's not hard to handle.
J
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-02-2003 04:41 AM
07-02-2003 04:41 AM
Re: IP-Range on a Switch
I'll try to clarify a couple of things here to prevent misunderstandings.
Fist, 25XX-series is strictly layer2 device. That means there's no way you can create access lists with that, you can control IP broadcasts but that's it.
41XX-series does understand some layer3 features like you can create 16 static routes, but no ACLs there either.
What you can do, as advised already, is create port-based VLANs. You can configure each VLAN to a separate subnet. Also you can control on how many MAC addresses the switch will learn on a port.
If you truly want to be able to control things with ACLs, you need a router or a routing switch. In HP range this is currently limited to 53XX and 93XX-series.
Check the management and configuration guides, they're indeed very comprehensive things.
HTH,
Arimo
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-29-2003 09:10 AM
07-29-2003 09:10 AM
Re: IP-Range on a Switch
And when i set up VLANs for the backbone Switch...
the Clients could use IPs they want but they get no connection to others???
Hewlett Packard Enterprise International
- Communities
- HPE Blogs and Forum
© Copyright 2019 Hewlett Packard Enterprise Development LP