RE: issue with PIX and dhcp ? [7:39269]
I had the same issue with a 501 that I had. I couldn't get it to work via Time Warner and an associate tried on Comcast and had no luck. I have had success using a Cisco Router, but the PIX just wouldn't work. Something I did was to forge the mac address of the PIX with a linksys so that it would grab a DHCP address. I then swapped out the eq and hard coded the address. It worked for about an hour then it died. With Time warner, the cable modem will see the DHCP reply that is sent to your device and add that to its mac/ip table. They have a private network between the cable modem and their eq, and use NAT translation at the cable modem itself. The cable modem ( at least in my area ) will only hold 2 MAC/IP address combo's so you might need to reset the cable modem To clear out its table. Would be curious if you have success or not, that way I can tell if it was just a local problem , or a Cisco PIX issue. Thanks Larry -Original Message- From: John Green [mailto:[EMAIL PROTECTED]] Sent: Friday, March 22, 2002 10:24 PM To: [EMAIL PROTECTED] Subject: issue with PIX and dhcp ? [7:39269] is any one aware of any issue with PIX501 and connecting via cable modem to get an ip address (dhcp) ? internet-cable-PIXHOST modem 501 without the pix, the HOST is able to get the dhcp ip address fine. the pix is configured to get an ipaddress from dhcp for its outside interface. but it is failing. does anyone know of such issues ? __ Do You Yahoo!? Yahoo! Movies - coverage of the 74th Academy Awards. http://movies.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39273&t=39269 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: issue with PIX and dhcp ? [7:39269]
Is this down to the fact that a Pix doesn't do a gratuitous ARP on boot up? (Or does it) I know that if you replace a router with a pix of the same IP address, that this causes problems, which can normally be rectified by rebooting the other end device. Of course you've not always got that luxury, so how about fitting the Pix and leaving the ARP to time out on the other device. I think Cisco default is 4 hours isn't it? (14400 seconds). Anybody know if there is a way of getting the Pix to send a gratuitous ARP (at least to be able to turn it on then turn it off again), and why would this be turned off, what is the real risk. A few guesses going on here, so I think I'll go and have a hunt round. Cheers, Gaz ""Roberts, Larry"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I had the same issue with a 501 that I had. I couldn't get it to work via > Time Warner and an associate tried on Comcast and had no luck. > I have had success using a Cisco Router, but the PIX just wouldn't work. > Something I did was to forge the mac address of the PIX with a linksys so > that it would grab a DHCP address. > I then swapped out the eq and hard coded the address. It worked for about an > hour then it died. > > With Time warner, the cable modem will see the DHCP reply that is sent to > your device and add that to its mac/ip table. > They have a private network between the cable modem and their eq, and use > NAT translation at the cable modem itself. > The cable modem ( at least in my area ) will only hold 2 MAC/IP address > combo's so you might need to reset the cable modem > To clear out its table. > > Would be curious if you have success or not, that way I can tell if it was > just a local problem , or a Cisco PIX issue. > > > Thanks > > Larry > > -Original Message- > From: John Green [mailto:[EMAIL PROTECTED]] > Sent: Friday, March 22, 2002 10:24 PM > To: [EMAIL PROTECTED] > Subject: issue with PIX and dhcp ? [7:39269] > > > is any one aware of any issue with PIX501 and > connecting via cable modem to get an ip address (dhcp) > ? > > internet-cable-PIXHOST >modem 501 > > without the pix, the HOST is able to get the dhcp ip > address fine. the pix is configured to get an > ipaddress from dhcp for its outside interface. but it > is failing. > does anyone know of such issues ? > > > __ > Do You Yahoo!? > Yahoo! Movies - coverage of the 74th Academy Awards. > http://movies.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39289&t=39269 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: issue with PIX and dhcp ? [7:39269]
Hi John, Cable companies often configure their provisioning (DHCP) severs to verify that the incoming DHCP request is from a MAC which is known. Couple of things to try. * Power cycle the CM and then have the PIX attempt to do DHCP. Do you get a DHCP OFFER? * After you power cycle the modem, put a sniffer on the wire between the PIX and modem to make sure that the PIX is generating enet frames from only one src MAC address. Depending on your service and how the CM is configured, the CM might be configured to learn one MAC on the home-side. If the PIX is generating frames with different MAC src then the one used for DHCP, this could be your issue. * If the above doesn't help and you have a host which does get an IP address, configure the PIX (if possible) to generate MAC src frames which originate with the host's MAC. If this works, its likely because the cable company's DHCP servers will only respond to known MACs. If you're an ATTBI-(former E@H/TCI) customer, "unknown" MACs will usually get an IP address (but you'll have limited access). If you're an ATTBI-(former Roadrunner/Mediaone) customer, the provisioning system must know your MAC in order for it to respond to your DHCP. Hope this helps, John Green wrote: > > is any one aware of any issue with PIX501 and > connecting via cable modem to get an ip address (dhcp) > ? > > internet-cable-PIXHOST >modem 501 > > without the pix, the HOST is able to get the dhcp ip > address fine. the pix is configured to get an > ipaddress from dhcp for its outside interface. but it > is failing. > does anyone know of such issues ? > > __ > Do You Yahoo!? > Yahoo! Movies - coverage of the 74th Academy Awards. > http://movies.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39296&t=39269 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: issue with PIX and dhcp ? [7:39269]
I'm having the same problem with a PIX 501 and cable modem. I'm probably just going to take the IP received from the PC by the ISP and just put it statically on the outside interface on the PIX. Does anyone foresee any issues with this setup? ""bergenpeak"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi John, > > Cable companies often configure their provisioning (DHCP) severs > to verify that the incoming DHCP request is from a MAC which is > known. > > Couple of things to try. > > * Power cycle the CM and then have the PIX attempt to do DHCP. > Do you get a DHCP OFFER? > > * After you power cycle the modem, put a sniffer on the wire > between the PIX and modem to make sure that the PIX is generating > enet frames from only one src MAC address. Depending on your service > and how the CM is configured, the CM might be configured to learn > one MAC on the home-side. If the PIX is generating frames with > different MAC src then the one used for DHCP, this could be your > issue. > > * If the above doesn't help and you have a host which does get > an IP address, configure the PIX (if possible) to generate MAC > src frames which originate with the host's MAC. If this works, > its likely because the cable company's DHCP servers will only > respond to known MACs. > > If you're an ATTBI-(former E@H/TCI) customer, "unknown" MACs will > usually get an IP address (but you'll have limited access). > > If you're an ATTBI-(former Roadrunner/Mediaone) customer, the > provisioning system must know your MAC in order for it to respond > to your DHCP. > > Hope this helps, > > > > John Green wrote: > > > > is any one aware of any issue with PIX501 and > > connecting via cable modem to get an ip address (dhcp) > > ? > > > > internet-cable-PIXHOST > >modem 501 > > > > without the pix, the HOST is able to get the dhcp ip > > address fine. the pix is configured to get an > > ipaddress from dhcp for its outside interface. but it > > is failing. > > does anyone know of such issues ? > > > > __ > > Do You Yahoo!? > > Yahoo! Movies - coverage of the 74th Academy Awards. > > http://movies.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39332&t=39269 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: issue with PIX and dhcp ? [7:39269]
"It Depends"!! Historically, If the PC's DHCP-assigned address has never really changed that often, then you should be fine. If it has changed on a rather frequent basis, then it'll probably stop having outside communication after a small period of time. Just as a side note, in some parts of the US, specifically the D/FW area of Texas, the Cable-modem providers have not configured their networks in a way that the PIX 501 doesn't get a DHCP address. One of my colleagues is running this with his provider. He has a PIX 501 set up on Cable-modem, and just has to bounce his PIX every once in a while because the DHCP lease doesn't renew in a standard automated fasion. But as long as he reboots the PIX, it gets a new address, and keeps on transcieving I'll have to check to see who his provider is though to give you an idea of who does this functionality. -Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Audy Bautista Sent: Saturday, March 23, 2002 10:36 PM To: [EMAIL PROTECTED] Subject: Re: issue with PIX and dhcp ? [7:39269] I'm having the same problem with a PIX 501 and cable modem. I'm probably just going to take the IP received from the PC by the ISP and just put it statically on the outside interface on the PIX. Does anyone foresee any issues with this setup? ""bergenpeak"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi John, > > Cable companies often configure their provisioning (DHCP) severs > to verify that the incoming DHCP request is from a MAC which is > known. > > Couple of things to try. > > * Power cycle the CM and then have the PIX attempt to do DHCP. > Do you get a DHCP OFFER? > > * After you power cycle the modem, put a sniffer on the wire > between the PIX and modem to make sure that the PIX is generating > enet frames from only one src MAC address. Depending on your service > and how the CM is configured, the CM might be configured to learn > one MAC on the home-side. If the PIX is generating frames with > different MAC src then the one used for DHCP, this could be your > issue. > > * If the above doesn't help and you have a host which does get > an IP address, configure the PIX (if possible) to generate MAC > src frames which originate with the host's MAC. If this works, > its likely because the cable company's DHCP servers will only > respond to known MACs. > > If you're an ATTBI-(former E@H/TCI) customer, "unknown" MACs will > usually get an IP address (but you'll have limited access). > > If you're an ATTBI-(former Roadrunner/Mediaone) customer, the > provisioning system must know your MAC in order for it to respond > to your DHCP. > > Hope this helps, > > > > John Green wrote: > > > > is any one aware of any issue with PIX501 and > > connecting via cable modem to get an ip address (dhcp) > > ? > > > > internet-cable-PIXHOST > >modem 501 > > > > without the pix, the HOST is able to get the dhcp ip > > address fine. the pix is configured to get an > > ipaddress from dhcp for its outside interface. but it > > is failing. > > does anyone know of such issues ? > > > > __ > > Do You Yahoo!? > > Yahoo! Movies - coverage of the 74th Academy Awards. > > http://movies.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39345&t=39269 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: issue with PIX and dhcp ? [7:39269]
Why doesn't he just telnet/console into the PIX and do a 'ip address dhcp ...' instead of rebooting? This should renew it - at least this was working for me in a PIX class I attended last week. I did ask the instructor if you could change the MAC address on the PIX due to ISPs locking DHCP down to a MAC address and right nows theres not a way to change the MAC. --- Mark Odette II wrote: > "It Depends"!! > > Historically, If the PC's DHCP-assigned address has > never really changed > that often, then you should be fine. If it has > changed on a rather frequent > basis, then it'll probably stop having outside > communication after a small > period of time. > > Just as a side note, in some parts of the US, > specifically the D/FW area of > Texas, the Cable-modem providers have not configured > their networks in a way > that the PIX 501 doesn't get a DHCP address. One of > my colleagues is > running this with his provider. He has a PIX 501 > set up on Cable-modem, and > just has to bounce his PIX every once in a while > because the DHCP lease > doesn't renew in a standard automated fasion. But > as long as he reboots the > PIX, it gets a new address, and keeps on > transcieving > > I'll have to check to see who his provider is though > to give you an idea of > who does this functionality. > > -Mark > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of > Audy Bautista > Sent: Saturday, March 23, 2002 10:36 PM > To: [EMAIL PROTECTED] > Subject: Re: issue with PIX and dhcp ? [7:39269] > > > I'm having the same problem with a PIX 501 and cable > modem. I'm probably > just going to take the IP received from the PC by > the ISP and just put it > statically on the outside interface on the PIX. > Does anyone foresee any > issues with this setup? > > > ""bergenpeak"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hi John, > > > > Cable companies often configure their provisioning > (DHCP) severs > > to verify that the incoming DHCP request is from a > MAC which is > > known. > > > > Couple of things to try. > > > > * Power cycle the CM and then have the PIX attempt > to do DHCP. > > Do you get a DHCP OFFER? > > > > * After you power cycle the modem, put a sniffer > on the wire > > between the PIX and modem to make sure that the > PIX is generating > > enet frames from only one src MAC address. > Depending on your service > > and how the CM is configured, the CM might be > configured to learn > > one MAC on the home-side. If the PIX is > generating frames with > > different MAC src then the one used for DHCP, this > could be your > > issue. > > > > * If the above doesn't help and you have a host > which does get > > an IP address, configure the PIX (if possible) to > generate MAC > > src frames which originate with the host's MAC. > If this works, > > its likely because the cable company's DHCP > servers will only > > respond to known MACs. > > > > If you're an ATTBI-(former E@H/TCI) customer, > "unknown" MACs will > > usually get an IP address (but you'll have limited > access). > > > > If you're an ATTBI-(former Roadrunner/Mediaone) > customer, the > > provisioning system must know your MAC in order > for it to respond > > to your DHCP. > > > > Hope this helps, > > > > > > > > John Green wrote: > > > > > > is any one aware of any issue with PIX501 and > > > connecting via cable modem to get an ip address > (dhcp) > > > ? > > > > > > internet-cable-PIXHOST > > >modem 501 > > > > > > without the pix, the HOST is able to get the > dhcp ip > > > address fine. the pix is configured to get an > > > ipaddress from dhcp for its outside interface. > but it > > > is failing. > > > does anyone know of such issues ? > > > > > > > __ > > > Do You Yahoo!? > > > Yahoo! Movies - coverage of the 74th Academy > Awards. > > > http://movies.yahoo.com/ [EMAIL PROTECTED] __ Do You Yahoo!? Yahoo! Movies - coverage of the 74th Academy Awards. http://movies.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39346&t=39269 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: issue with PIX and dhcp ? [7:39269]
I set up the PIX with the outside interface (statically) the same as the IP given to my server from the cable modem and it didn't work, so I reset the cable modem and I had no choice but to put the outside interface on DHCP, and it picked up an IP immediately. I did this around 1:30 am; so far so good. But I'm worried about the problem you had; the IP failing. Theoretically, as long as I keep my the PIX plugged in exactly the way I have it and the same DHCP server is available, it should continue to renew it's lease 50% into the lease period. The bad part for me about the changing IP address is that I had to change the host records for 2 of my domain names to reflect the new IP address (bummer). I've had the same IP address for over 3 months. I'll let you know if I have any other issues with this. Thanks. -Original Message- From: John Green To: Audy Bautista Sent: 3/24/02 8:14 AM Subject: Re: issue with PIX and dhcp ? [7:39269] my issue is solved. what about you. email me if your issue persists. --- Audy Bautista wrote: > I'm having the same problem with a PIX 501 and cable > modem. I'm probably > just going to take the IP received from the PC by > the ISP and just put it > statically on the outside interface on the PIX. > Does anyone foresee any > issues with this setup? > > > ""bergenpeak"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hi John, > > > > Cable companies often configure their provisioning > (DHCP) severs > > to verify that the incoming DHCP request is from a > MAC which is > > known. > > > > Couple of things to try. > > > > * Power cycle the CM and then have the PIX attempt > to do DHCP. > > Do you get a DHCP OFFER? > > > > * After you power cycle the modem, put a sniffer > on the wire > > between the PIX and modem to make sure that the > PIX is generating > > enet frames from only one src MAC address. > Depending on your service > > and how the CM is configured, the CM might be > configured to learn > > one MAC on the home-side. If the PIX is > generating frames with > > different MAC src then the one used for DHCP, this > could be your > > issue. > > > > * If the above doesn't help and you have a host > which does get > > an IP address, configure the PIX (if possible) to > generate MAC > > src frames which originate with the host's MAC. > If this works, > > its likely because the cable company's DHCP > servers will only > > respond to known MACs. > > > > If you're an ATTBI-(former E@H/TCI) customer, > "unknown" MACs will > > usually get an IP address (but you'll have limited > access). > > > > If you're an ATTBI-(former Roadrunner/Mediaone) > customer, the > > provisioning system must know your MAC in order > for it to respond > > to your DHCP. > > > > Hope this helps, > > > > > > > > John Green wrote: > > > > > > is any one aware of any issue with PIX501 and > > > connecting via cable modem to get an ip address > (dhcp) > > > ? > > > > > > internet-cable-PIXHOST > > >modem 501 > > > > > > without the pix, the HOST is able to get the > dhcp ip > > > address fine. the pix is configured to get an > > > ipaddress from dhcp for its outside interface. > but it > > > is failing. > > > does anyone know of such issues ? > > > > > > > __ > > > Do You Yahoo!? > > > Yahoo! Movies - coverage of the 74th Academy > Awards. > > > http://movies.yahoo.com/ [EMAIL PROTECTED] __ Do You Yahoo!? Yahoo! Movies - coverage of the 74th Academy Awards. http://movies.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39364&t=39269 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: issue with PIX and dhcp ? [7:39269]
Oh, he could do that, but if someone were multi-tasking (read: doing many things at the same time and suddenly tried hopping on the "net", couldn't, and it wasn't all that important at the moment, and they knew WHY they couldn't get on the net (because of the DHCP issue)), they could just power-cycle the PIX and keep going... It doesn't really matter... its just one of those lazy factorseither way would probably take about as much time... it just depends on your attitude. :) I personally would, and always do, come to a screeching halt with what I'm doing to go through the steps of troubleshooting to find out why the "net" suddenly became unreachable I mean, you never know, something may have changed physically in the topology, or maybe you entered a command on the PIX that you didn't verify that you did correctly, and simply started denying yourself access to the net. :) -Mark -Original Message- From: Erick B. [mailto:[EMAIL PROTECTED]] Sent: Sunday, March 24, 2002 5:18 AM To: Mark Odette II; [EMAIL PROTECTED] Subject: RE: issue with PIX and dhcp ? [7:39269] Why doesn't he just telnet/console into the PIX and do a 'ip address dhcp ...' instead of rebooting? This should renew it - at least this was working for me in a PIX class I attended last week. I did ask the instructor if you could change the MAC address on the PIX due to ISPs locking DHCP down to a MAC address and right nows theres not a way to change the MAC. --- Mark Odette II wrote: > "It Depends"!! > > Historically, If the PC's DHCP-assigned address has > never really changed > that often, then you should be fine. If it has > changed on a rather frequent > basis, then it'll probably stop having outside > communication after a small > period of time. > > Just as a side note, in some parts of the US, > specifically the D/FW area of > Texas, the Cable-modem providers have not configured > their networks in a way > that the PIX 501 doesn't get a DHCP address. One of > my colleagues is > running this with his provider. He has a PIX 501 > set up on Cable-modem, and > just has to bounce his PIX every once in a while > because the DHCP lease > doesn't renew in a standard automated fasion. But > as long as he reboots the > PIX, it gets a new address, and keeps on > transcieving > > I'll have to check to see who his provider is though > to give you an idea of > who does this functionality. > > -Mark > > -Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of > Audy Bautista > Sent: Saturday, March 23, 2002 10:36 PM > To: [EMAIL PROTECTED] > Subject: Re: issue with PIX and dhcp ? [7:39269] > > > I'm having the same problem with a PIX 501 and cable > modem. I'm probably > just going to take the IP received from the PC by > the ISP and just put it > statically on the outside interface on the PIX. > Does anyone foresee any > issues with this setup? > > > ""bergenpeak"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hi John, > > > > Cable companies often configure their provisioning > (DHCP) severs > > to verify that the incoming DHCP request is from a > MAC which is > > known. > > > > Couple of things to try. > > > > * Power cycle the CM and then have the PIX attempt > to do DHCP. > > Do you get a DHCP OFFER? > > > > * After you power cycle the modem, put a sniffer > on the wire > > between the PIX and modem to make sure that the > PIX is generating > > enet frames from only one src MAC address. > Depending on your service > > and how the CM is configured, the CM might be > configured to learn > > one MAC on the home-side. If the PIX is > generating frames with > > different MAC src then the one used for DHCP, this > could be your > > issue. > > > > * If the above doesn't help and you have a host > which does get > > an IP address, configure the PIX (if possible) to > generate MAC > > src frames which originate with the host's MAC. > If this works, > > its likely because the cable company's DHCP > servers will only > > respond to known MACs. > > > > If you're an ATTBI-(former E@H/TCI) customer, > "unknown" MACs will > > usually get an IP address (but you'll have limited > access). > > > > If you're an ATTBI-(former Roadrunner/Mediaone) > customer, the > > provisioning system must know your MAC in order > for it to respond > > to your DHCP. > > > > Hope this helps, > > > > > >
