IP BLOCKED WHEN USING HP PROCURVE 172.16.X.X

[HP_XR44]

Hello.

When I connect devices to the HP Procurve this IP gets blocked 172.16.201.x, what is this doing? There should be no IP's blocked from using a switch.

How do I disable this IP which tries to connect to my devices exactly every 2 minutes.

I had to reformat all my PC's to try and fix this until I realized the IP is from the bloody switch.

Thankyou for your time and hope to speak soon.

[HP_XR44]

170+ views and no reply? Nothing on the other HP forum either. Cant contact HP support becuase the website wont accept any Procurve model as a number to proceed with the support.

HP this is a joke.

[Vince-Whirlwind]

It's not really clear what you're asking, and you haven't provided any logs or other detail about what it is you are seeing.

Do we assume you are seeing this in a Windows log? Surely there is more detail than this? ie, if it logs which TCP/UDP port it is addressed at, that should tell you what application it is.

If you read through your switch config, you might see what the switch is configured with which might be doing this.

Otherwise, a pcap should show you exactly what it is.

[HP_XR44]

Hello and thankyou for the reply much appreciated.

The IP address is a IGMP type, it shows on my firewall as a LAN/DROP 172.16.201.xx and its blocked on peerblock also, it 100% emitting from the switch because I have changed the unit and the IP is gone.

Its not any sort of application either, the IGMP IP address is blocked exactly every 2 minutes when connected to the HP procurve, very strange indeed.

Its like some sort of IP snooping, I would like to disable it but I cannot find anything online regarding this?

How do you disable the IGMP settings on the switch?

Thankyou for your time and hope to speak soon. 

[Vince-Whirlwind]

How many switches do you have?

If you're seeing it every 2 minutes, that's probably just the default IGMP querier.

Do a
show ip igmp config
to see what you have configured on the switch.

You can switch the querier off per vlan with
no vlan n ip igmp querier

Usually you would do that on all your switches except your "Core" switch.

Like STP it's a good idea to design and apply IGMP/PIM config that achieves your aim for multicasting. If you don't configure your network for multicasting, then multicast ends up being effectively similar to broadcast traffic, which isn't necessarily a problem, but it's always nice if things are controlled and neat.

[HP_XR44]

Hello and thankyou for the reply.

Just have the one switch, which was upgraded from 100mb to the Procurve 1GB.

May I ask is there an HP application to login to the switch? I've never actually logged into any switch before? Checking online I do see a program called Putty, which console should I use here if I may ask?

Thankyou for your time and hope to speak soon.

[HP_XR44]

Hello.

I have purchased a USB console cable and downloaded and installed the drivers for the units serial port. I have installed Putty also.

I can successfully access the Procurve using Putty but the command you have provided dosent seem to work? On the console screen its says 'Invalid Input : vlan''

May I ask is Putty the correct program to use here or have I made some kind of mistake?

show ip igmp config'' This shows that the vlan is disabled, but the Querier is active.

no vlan n ip igmp querier'' This results in the Invaid Input:vlan error.

Thankyou for your time and hope to speak soon.

[BjKo]

Hi,#

I'm not really sure what your problem is. In the first post it sounds like an IP address you want to connect to gets blocked by the switch. But then it sounds like the firewall blocks this IP and it comes from the switch. So I'm not really sure what the goal of this is.

Putty is fine. You need to change into config mode before you can change the configuration. 
You can do that with the command "configure" or "configure terminal".

Since you never accessed the switch, it sounds like you may have some old configuration by a previous owner on the switch. Did you get the switch in a factory default state? 

IGMP is not activated by default, neither are IP adresses, so someone has done something. Do you know which colleague might have done this?

You can check the IP addresses with "show ip". You can then change the IP address in a certain VLAN with "vlan <n> ip address 10.10.10.10/24" or delete it with "no vlan <n> ip address 10.10.10.10/24"