I have successfully deployed numerous uplink MACsec-encrypted links in a fashion similar to the following where both ends are layer 3, or both ends are layer 2 trunks. The platforms are Catalyst 6840Xs, 3850s and 3650s.
interface GigabitEthernet1/1/4 switchport mode trunk cts manual no propagate sgt sap pmk 012345789abcdef mode-list gcm-encrypt
I have a need to accomplish the same except this time, one end is a 6840X with a routed interface with dot1q-encapsulated subinterfaces linked to a Catalyst 3650 with a trunked-layer2 uplink. For my application it is acceptable to either: (a) apply MACsec encryption on all dot1q-tagged traffic on this connection, or (b) apply MACsec encryption on a particular VLAN on it. Either is fine.
I was hopeful that the configuration snippet above could simply be applied to my 3650's uplink trunk, and the 6840X's main interface (sample below). But judging by the 6840X's inability to bring up the CTS session, this scenario apparently isn't as straightforward as I thought.
interface GigabitEthernet1/1/2 no switchport
no ip address cts manual no propagate sgt sap pmk 012345789abcdef mode-list gcm-encrypt
interface GigabitEthernet1/1/2.1 encapsulation dot1q 10 ip address 220.127.116.11 255.255.255.0
interface GigabitEthernet1/1/2.2 encapsulation dot1q 20 ip address 18.104.22.168 255.255.255.0
I can't find anything in the MACsec documentation that appears to cover my use case. Can anyone offer some advice on how I should configure this?
... View more
I am considering the deployment of A-VPLS in combo with integrated routing and bridging (IRB) for a data center interconnect scenario. Reading through the explanation and example configuration in the documentation (such as in "Data Center Interconnect: Advanced Virtual Private LAN Service") there are a couple of points about it that are missing which I need clarification on.
(1) The example clearly shows how IRB would be configured at one MPLS-PE node. What is not clear to me is whether IRB may only be configured on one PE node for a given VLAN, or may it also be configured on the corresponding VLAN interfaces of the other PE nodes as well.
(2) If answer to above is yes, it is permissible to do IRB for a given VLAN at multiple nodes in the VPLS system, then may I also configure the same IP address on each of the IRB interfaces or must their IP addresses be different?
In other words, building off the example in the document cited above, if the following is configured on MPLS node "A"...
interface TenGigabitEthernet1/1/3/0 ip address 10.1.1.1 255.255.255.0 mpls ip ! interface virtual-ethernet 1 transport vpls mesh neighbor 10.2.2.2 pw-class cl1 neighbor 10.3.3.3 pw-class cl1 switchport switchport mode trunk switchport trunk allowed vlan 10, 20 ! Interface VLAN 10 ip vrf forwarding vrf_1 ip address 22.214.171.124 255.255.255.0 ! Interface VLAN 20 ip vrf forwarding vrf_2 ip address 126.96.36.199 255.255.255.0 end
...am I allowed to repeat the same IRB configuration of interfaces VLAN10 and VLAN20 on nodes "B" and "C", like thus:
interface TenGigabitEthernet1/1/6/0 ip address 10.2.2.2 255.255.255.0 mpls ip ! interface virtual-ethernet 1 transport vpls mesh neighbor 10.1.1.1 pw-class cl1 neighbor 10.3.3.3 pw-class cl1 switchport switchport mode trunk switchport trunk allowed vlan 10, 20 ! Interface VLAN 10 ip vrf forwarding vrf_1 ip address 188.8.131.52 255.255.255.0 ! Same IP address as node A's vlan 10 interface ! Interface VLAN 20 ip vrf forwarding vrf_2 ip address 184.108.40.206 255.255.255.0 ! Same IP address as node A's vlan 20 interface end
interface TenGigabitEthernet1/1/9/0 ip address 10.3.3.3 255.255.255.0 mpls ip ! interface virtual-ethernet 1 transport vpls mesh neighbor 10.2.2.2 pw-class cl1 neighbor 10.1.1.1 pw-class cl1 switchport switchport mode trunk switchport trunk allowed vlan 10, 20 ! Interface VLAN 10 ip vrf forwarding vrf_1 ip address 220.127.116.11 255.255.255.0 ! Same IP address as node A's vlan 10 interface ! Interface VLAN 20 ip vrf forwarding vrf_2 ip address 18.104.22.168 255.255.255.0 ! Same IP address as node A's vlan 20 interface end
... View more
Aaron, thank you for the troubleshooting tips! I am more of a routing/switching guy rather than IP telephony. My availability to troubleshoot the issue has dwindled temporarily for a few days due to an upcoming audit so I haven't had a chance to follow through on everything you listed, but I did find the factory reset procedure and gave that a whirl on the defunct phones and that successfully resucitated them. What remains to be solved then is determining what put them into this state. I hope your additional suggestions will lead me to an answer. Let me throw in here that upon examining my three switch logs again, I believe the switches may be removing power from the phones. I am getting a number of "%ILPOWER-5-IEEE_DISCONNECT: Interface Fa0/xx: PD removed " messages which I originally thought were triggered by the phone restarts but am now of the belief that they lead ahead of the restarts. So that would point to a PoE or power problem of some sort. Since this occurs across three different switches in the building, I don't believe I am looking at a malfunctioning switch. Though in considering what is different about this building from all the others I maintain, something recently occurred to me, this building has solar panels! So now I'm beginning to wonder if something about its power inverters is disagreeing with my PoE?
... View more
If this is happening across multiple 3560s in a building, and with different patch cords, and when directly plugged into a test switch (a 3560-8PC), wouldn't you say most of the problems a TDR can detect would be ruled out? Unless perhaps some flaky office connections are corrupting TFTP transfers to the phones. In that case I would image the replacement phones eventually having problems as well. I was wondering if the Record Store Exception messages in lines 2670-2672 might be some clue. I'm not familiar with what to expect in normal logs, but those strike me as suspicious. --Norm
... View more
I have a growing number of CP7961G and 41G phones in one of my buildings that go into a state where they continuously reboot and my only recourse is to swap them out with a spare. My telecomm specialist is concerned that if this continues, we will run out of spares. Particulars: We are running UCM v7.1.5, non-clustered, on a publisher and a subscriber. The phones are about 6 years old. The building is served by three Catalyst 3560-48PS which are not approaching their PoE limits. We have verified that the problem is not related to a particular switch, port, or patch cord. The phone will continue rebooting when we bring it back to the test bench. Wiping out its config in UCM and putting a different config on it has no effect. It is something of a challenge to grab any logs off the phone between reboots, but I managed to retrieve the following messages right before it went down. Any advice? 2662: NOT 14:15:52.387021 JVM: Startup Module Loader|cip.midp.midletsuite.InstallerModule:? - propertyChanged - device.settings.fullyregistered value=true 2663: NOT 14:15:52.389162 JVM: Startup Module Loader|cip.midp.midletsuite.InstallerModule:? - FULLY_REGISTERED - Resetting retry installer interval 2664: NOT 14:15:52.391383 JVM: Startup Module Loader|cip.midp.pushregistry.e:? - setAcceptConnections - ENABLED 2665: NOT 14:15:52.393446 JVM: Startup Module Loader|cip.midp.midletsuite.InstallerModule:? - propertyChanged - device.settings.fullyregistered value=true 2666: NOT 14:15:52.395528 JVM: Startup Module Loader|cip.midp.midletsuite.InstallerModule:? - FULLY_REGISTERED - Resetting retry installer interval 2667: NOT 14:15:52.397532 JVM: Startup Module Loader|cip.midp.pushregistry.e:? - setAcceptConnections - ENABLED 2668: NOT 14:15:52.399608 JVM: Startup Module Loader|cip.midp.midletsuite.InstallerModule:? - propertyChanged - device.callagent.messages.0 value=0 2669: WRN 14:15:52.402999 JVM: Startup Module Loader|cip.mmgr.dt:? - [MediaMgrSM]: Unhandled Event, State = StateOnHook Event = EventServicesTxStop 2670: ERR 14:15:52.405170 JVM: Startup Module Loader|cip.midp.rms.RecordStoreImpl:midp.rms.IOExceptionInCompactRS - Exception while loading(262160) a RecordHeader() in compactRecords(): java.io.IOException: load invalid offset 262160 2671: ERR 14:15:52.419248 JVM: 2:15:52p|java.io.IOException: load invalid offset 262160 at cip.midp.rms.b.a(I)V(Unknown Source) at cip.midp.rms.RecordStoreImpl.compactRecords()V(Unknown Source) at cip.midp.rms.RecordStoreImpl.flush()V(Unknown Source) at cip.props.a.b()V(Unknown Source) at cip.props.f.a()V(Unknown Source) at cip.props.PropertyManager.timerFired(Lcip/sys/k;)V(Unknown Source) at cip.sys.ar.a(Lcip/sys/ab;Lcip/sys/x;)V(Unknown Source) at cip.sys.ar.sinkMessage(Lcip/sys/x;)V(Unknown Source) at cip.sys.n.sinkMessage(Lcip/sys/x;)V(Unknown Source) at cip.sys.aa.a(Lcip/sys/ad;)Ljava/lang/Throwable;(Unknown Source) at cip.sys.aa.e()V(Unknown Source) at cip.sys.l.run()V(Unknown Source) at java.lang.Thread.startup(Z)V(Unknown Source) 2672: ERR 14:15:52.423225 JVM: Startup Module Loader|PropertyManager:timerFired - Exception flushing RMS.javax.microedition.rms.RecordStoreException: Exception while loading(262160) a RecordHeader() in compactRecords(): java.io.IOException: load invalid offset 262160deleting primary RMS and requesting hardreset to load backup RMS. 2673: ERR 14:15:52.425558 JVM: Startup Module Loader|RmsPropertyStore:? - javax.microedition.rms.RecordStoreException: deleteRecordStore error: record store is still open 2674: NOT 14:15:52.472344 JVM: Startup Module Loader|cip.cfg.ConfigManager:? - --->ConfigManager PropertyChanged: device.system.systemstate 2675: NOT 14:15:52.474498 JVM: Startup Module Loader|cip.cfg.ConfigManager:? - <---ConfigManager PropertyChanged: device.system.systemstate 2676: ERR 14:15:52.476791 JVM: SystemManager n/a SYSTEM_RESTARTING 2677: ERR 14:15:52.617343 JVM: SystemManager n/a *systemUnload -->* 2678: ERR 14:15:52.619287 JVM: SystemManager n/a unloadAllModules -> 2679: ERR 14:15:52.621685 JVM: SystemManager n/a Unload in this order: 2680: ERR 14:15:52.623620 JVM: SystemManager n/a SCCP Call Control 2681: ERR 14:15:52.625579 JVM: SystemManager n/a InstallerModule 2682: ERR 14:15:52.627558 JVM: SystemManager n/a NotificationModule 2683: ERR 14:15:52.629416 JVM: SystemManager n/a SubscriptionManager 2684: ERR 14:15:52.631503 JVM: SystemManager n/a Starts Automation Feature 2685: ERR 14:15:52.633381 JVM: SystemManager n/a Sidecar 2686: ERR 14:15:52.635212 JVM: SystemManager n/a Vieo 2687: ERR 14:15:52.637111 JVM: SystemManager n/a AppStatus 2688: ERR 14:15:52.638977 JVM: SystemManager n/a Help 2689: ERR 14:15:52.640997 JVM: SystemManager n/a Go4 2690: ERR 14:15:52.642971 JVM: SystemManager n/a Messages 2691: ERR 14:15:52.644974 JVM: SystemManager n/a Directories 2692: ERR 14:15:52.646820 JVM: SystemManager n/a Services 2693: ERR 14:15:52.648743 JVM: SystemManager n/a Settings 2694: ERR 14:15:52.650702 JVM: SystemManager n/a Push Service 2695: ERR 14:15:52.652569 JVM: SystemManager n/a HTTP Server/Microservlet Container 2696: ERR 14:15:52.654502 JVM: SystemManager n/a HTTP 2697: ERR 14:15:52.656352 JVM: SystemManager n/a Config Manager 2698: ERR 14:15:52.658176 JVM: SystemManager n/a Security 2699: ERR 14:15:52.660245 JVM: SystemManager n/a TFTP Client 2700: ERR 14:15:52.662092 JVM: SystemManager n/a Call UI 2701: ERR 14:15:52.663910 JVM: SystemManager n/a Media Manager 2702: ERR 14:15:52.665803 JVM: SystemManager n/a Call Agent 2703: ERR 14:15:52.667676 JVM: SystemManager n/a Application Manager 2704: ERR 14:15:52.669492 JVM: SystemManager n/a Display 2705: ERR 14:15:52.671540 JVM: SystemManager n/a Input Manager 2706: ERR 14:15:52.673500 JVM: SystemManager n/a Localization Manager 2707: ERR 14:15:52.675439 JVM: SystemManager n/a Reset Service 2708: ERR 14:15:52.677400 JVM: SystemManager n/a Property Manager 2709: ERR 14:15:52.679351 JVM: SystemManager n/a Timer Manager 2710: ERR 14:15:52.681306 JVM: SystemManager n/a Trace Service 2711: ERR 14:15:52.683319 JVM: SystemManager n/a Trace Manager 2712: ERR 14:15:52.685942 JVM: SystemManager n/a module "SCCP Call Control"/sccpccapi(31) is UNLOADING 2713: ERR 14:15:52.814693 JVM: SystemManager n/a module "SCCP Call Control"/sccpccapi(31) is UNLOADED 2714: ERR 14:15:52.819241 JVM: SystemManager n/a module "InstallerModule"/installer(30) is UNLOADING 2715: WRN 14:15:52.892189 JVM: Startup Module Loader|cip.sccp.cn:? - Read exception: java.net.SocketException: Error 0 Close(d) Connection ..., errno=135 2716: ERR 14:15:52.907053 JVM: 2:15:52p|java.net.SocketException: Error 0 at cip.io.SecureInputStream.socketRead([BII)I(Native Method) at cip.io.SecureInputStream.read([BII)I(Unknown Source) at java.io.BufferedInputStream.fill()V(Unknown Source) at java.io.BufferedInputStream.read()I(Unknown Source) at java.io.DataInputStream.readInt()I(Unknown Source) at cip.io.i.readInt()I(Unknown Source) at cip.sccp.ax.a()Lcip/sccp/bu;(Unknown Source) at cip.sccp.cn.e()V(Unknown Source) at cip.sys.l.run()V(Unknown Source) at java.lang.Thread.startup(Z)V(Unknown Source) 2717: NOT 14:15:53.293053 JVM: Startup Module Loader|cip.midp.midletsuite.g:onRun - FinalizeObjectThread INTERRUPTED 2718: ERR 14:15:53.297661 JVM: SystemManager n/a module "InstallerModule"/installer(30) is UNLOADED 2719: ERR 14:15:53.300806 JVM: SystemManager n/a module "NotificationModule"/notification(29) is UNLOADING 2720: ERR 14:15:53.303783 JVM: SystemManager n/a module "NotificationModule"/notification(29) is UNLOADED 2721: ERR 14:15:53.306581 JVM: SystemManager n/a module "SubscriptionManager"/subscriptionman(28) is UNLOADING 2722: ERR 14:15:53.318673 JVM: SystemManager n/a module "SubscriptionManager"/subscriptionman(28) is UNLOADED ... ... ... 2819: NOT 14:16:00.563892 SYSMSG: pid 16 (/ubin/dsp) Normal Exit, status = 1 2820: INF 14:16:00.563965 runtime = 135.140 secs 2821: INF 14:16:00.564011 user cpu = 0.136747533 secs 2822: INF 14:16:00.564054 system cpu = 0.489695153 secs 2823: INF 14:16:00.564091 child user cpu = 0.000000000 secs 2824: INF 14:16:00.564125 child sys cpu = 0.000000000 secs 2825: INF 14:16:00.564173 sys interrupts = 1.283613038 secs for 20499 interrupts 2826: INF 14:16:00.564219 total cpu = 0.626692686 secs ( 0% utilization ) 2827: NOT 14:16:01.250272 DHCP: SIGTERM received...DHCP is exiting 2828: NOT 14:16:01.500314 DNS: SIGTERM received...DNS is exiting 2829: ERR 14:16:01.750246 login: :loginSIGTERM signo:23 2830: ERR 14:16:01.750682 login: :tcgetattr failed errno:25 2831: NOT 14:16:02.021689 SECD: exitHandler: ** EXITING, Ver: 1.4(1.2) [May 11 2011, 08:03:23] ** 2832: NOT 14:16:06.120490 init: Starting /sbin/inetd 2833: NOT 14:16:06.124411 init: /sbin/inetd started as pid=7 2834: NOT 14:16:06.175078 INETD: pid = 7 2835: NOT 14:16:06.175901 INETD: vvlan = 0 will be initiazed to 4096 2836: NOT 14:16:06.179804 INETD: sshAccessReadConf: sshAccess = 0 2837: NOT 14:16:06.505331 init: Starting /sbin/imgauthd 2838: NOT 14:16:06.509235 init: /sbin/imgauthd started as pid=20 2839: NOT 14:16:06.510234 init: Starting /bin/tftpClient 2840: NOT 14:16:06.514066 init: /bin/tftpClient started as pid=23 2841: NOT 14:16:06.514896 init: Starting /bin/secd 2842: NOT 14:16:06.518723 init: /bin/secd started as pid=14 2843: NOT 14:16:06.519551 init: Starting /bin/ntp 2844: NOT 14:16:06.523520 init: /bin/ntp started as pid=12 2845: NOT 14:16:06.524351 init: Starting /ubin/vieo 2846: NOT 14:16:06.528190 init: /ubin/vieo started as pid=10 2847: NOT 14:16:06.529020 init: Starting /ubin/dsp 2848: NOT 14:16:06.533004 init: /ubin/dsp started as pid=31 2849: NOT 14:16:06.533834 init: Starting /sbin/ewcl 2850: NOT 14:16:06.537658 init: /sbin/ewcl started as pid=25 2851: NOT 14:16:06.538484 init: Starting /bin/mkdir 2852: NOT 14:16:06.547443 init: /bin/mkdir started as pid=21 2853: NOT 14:16:06.565041 CDP-D: pid = 30 2854: NOT 14:16:06.582629 DHCP6: COLDBOOT - wait 4 seconds... 2855: NOT 14:16:06.589560 PAE: pid = 13 2856: NOT 14:16:06.592548 PAE: phone is not single port 2857: WRN 14:16:06.599864 PAE: paeReadPCStatus: empty file 2858: NOT 14:16:06.600744 PAE: link-0 is UP 2859: NOT 14:16:06.601574 PAE: starting supplicant 2860: NOT 14:16:06.602389 PAE: EV_DISABLED, ST_DISCONNECTED->ST_DISABLED 2861: NOT 14:16:06.603180 PAE: supplicant is disabled 2862: NOT 14:16:06.603987 PAE: paeSetLastSupStatus: LastSupStatus 0 2863: NOT 14:16:07.808304 ESP: send ADMIN, logging = 1, shell = 0, ipconfig = 1 2864: NOT 14:16:07.820307 IMG_AUTH: Version: 3.6(1.0): TNP REL 2865: NOT 14:16:07.821288 IMG_AUTH: model: CP-7961G, check for built-in key 2866: NOT 14:16:07.822133 IMG_AUTH: built-in platform RELEASE key is present 2867: NOT 14:16:07.822938 IMG_AUTH: built-in common RELEASE key is present 2868: NOT 14:16:07.824329 IMG_AUTH: TNP, built-in keys : Platform (curr), Common (curr) 2869: NOT 14:16:07.830481 tftpClient: pid = 23 2870: NOT 14:16:07.847867 SECD: main: Starting... Ver: 1.4(1.2) [May 11 2011, 08:03:23] 2871: NOT 14:16:07.853471 SECD: initSecMode: resuming sec mode NONE 2872: WRN 14:16:07.875848 SECD: WARN:loadCert: phone has no LSC cert 2873: NOT 14:16:07.876880 SECD: initResources: have cert+pkey: MIC only, no LSC 2874: NOT 14:16:07.877924 SECD: perform_selftests: FIPS RSA SHA1 Self-Tests Passed 2875: NOT 14:16:07.879697 SECD: perform_selftests: FIPS RSA HMAC-SHA1 Self-Tests Passed 2876: NOT 14:16:07.881400 SECD: perform_selftests: FIPS RSA AES Self-Tests Passed 2877: NOT 14:16:07.882752 SECD: perform_selftests: FIPS RSA 3DES Self-Tests Passed 2878: NOT 14:16:08.232243 SECD: perform_selftests: FIPS RSA Sign/Verify Self-Tests Passed 2879: NOT 14:16:08.233274 SECD: perform_selftests: FIPS RSA RNG Self-Tests Passed 2880: NOT 14:16:08.234162 SECD: perform_selftests: FIPS RSA Library Self-Tests Passed 2881: NOT 14:16:08.235031 SECD: runFipsPostTests: FIPS Security Information: RSA Self-Tests Passed 2882: NOT 14:16:08.236899 SECD: TL_initFromCTLFile: No TL file: /flash0/sec/ctl/CTLFile.tlv 2883: WRN 14:16:08.238165 SECD: WARN:initCTL: ** phone has NO CTL file ** 2884: NOT 14:16:08.239709 SECD: TL_initFromITLFile: No TL file: /flash0/sec/ctl/ITLFile.tlv 2885: WRN 14:16:08.241073 SECD: WARN:initCTL: ** phone has NO ITL file** 2886: WRN 14:16:08.241978 SECD: WARN:resetSecMode: ** WARN ** resetting sec mode to NONE (non-secure) 2887: NOT 14:16:08.244938 SECD: clearCapfList: CAPF table cleared 2888: NOT 14:16:08.246183 SECD: initCapfClnt: CAPF clnt initialized 2889: ERR 14:16:08.251313 SECD: EROR:initEntropy: Calling R_rand_seed with bytes 128 ... ... ...
... View more
I experienced the same behavior with pseudowires on my 6504E/Sup2T's. I have LDP and CE interfaces present on both active and standby supervisors. EoMPLS traffic arriving on the standby supervisor would not be forwarded out the CE-facing interface. Problem is that LDP fails to populate the standby supervisor's hardware forwarding tables like it does for the active sup and all the line cards. Putting MPLS LDP GRACEFUL-RESTART on the PE's and each of their neighbors fixed it as mentioned previously. Apparently, the GRACEFUL-RESTART code happens to touch the standby sup's forwarding tables.
... View more
On your handhelds, configure the profile for the guest SSID to use a security setting that is not supported for that SSID on the AP's. e.g. if shared key authentication is not supported by the AP for the guest SSID, then configure your CE device to use shared key authentication for it. It should fail and move on to another profile.
... View more
Cisco TAC informed me that getting it to display in plain HTTP was not possible, so I went ahead and purchased a trusted certificate. Perhaps we need to submit a new feature request? I really fail to see why I need to spend a couple hundred dollars to allow my guests to see an AUP page. I could be spending the money on more Cisco access points instead.
... View more
The documentation doesn't provide very clear direction, does it? To download the WLC's default webauth page, browse to the controller's Security > Web Login Page. Make sure the web authentication type is Internal (Default). Hit the Preview button. Then use your browser's File > Save As... menu item to save the HTML into a file. Edit this to your liking and bundle it and any graphics images up into a TAR archive, then upload via the controller's COMMAND page.
... View more
I have a custom webauth page installed that I am using with web passthrough authentication on my WLC2006 in order to put up a acceptable use policy page. The WLC uses HTTPS to display this which causes a security certificate warning to appear if I go with the WLC's own self-signed certificate. Is there a way I can get the WLC to use plain HTTP to display this page instead so I can eliminate the warning? I have already tried installing a trusted 3rd party certificate on the WLC, but I have this very strange problem where mucking with the WLC's web authentication certificate in any manner causes all network activity on the WLC to break except for CDP and ARP, essentially leaving the WLC dead. Three weeks of troubleshooting with Cisco TAC has yielded no progress on that front so now I am trying to bypass the need for a security certificate altogether since I really don't need to encrypt my acceptable use policy page.
... View more
I'm at wits end trying to debug a DHCP problem with my 4402 running 4.0.155. Wifi clients are unable to get a DHCP lease from an external DHCP server. It was previously working and failed at an unknown point in time. This is an infrequently used WLAN so if it was me that messed up the configuration, I received no immediate feedback and have no way of tying it back to any specific WLC or network changes I have done. "Debug dhcp enable" output yields "dhcpProxy: Dropping packet (no mscb) from STA 00:11:85:5d:3e:f8" Wifi client associations work fine. DHCP servers ping fine. DHCP relay for other WLANS/dynamic-interface pairings work fine. Using the internal DHCP yields no change. Sniffing verifies what the debug message states - the dhcp request is dropped and not observed leaving the WLC. Using static WEP encryption with shared-key authentication. DHCP server is configured on the dynamic interface and not on the WLAN (DHCP override in the WLAN configuration has no effect). ---Full DHCP debugging output--- Wed Oct 11 15:51:23 2006: 00:11:85:5d:3e:f8 dhcpProxy: Received packet: Client 00:11:85:5d:3e:f8 DHCP Op: BOOTREQUEST(1), IP len: 300, switchport: 1, encap: 0xec03 Wed Oct 11 15:51:23 2006: 00:11:85:5d:3e:f8 dhcpProxy: Dropping packet (no mscb) from STA 00:11:85:5d:3e:f8, giaddr:0.0.0.0, udpSrcPort:68, op:1
... View more