Blog Just another tech site


Cisco 2960s Ip Source Guard Port-Security Issue

IP Source Guard

Yesterday I had an issue where ip source guard with mac-address filtering was applied across a range of switches including 3560g's and 2960s'. The majority of switches functioned fine with the applied changes not affecting users. One issue appeared with a pair of 2960s switches which were running in series (one trunked to the next), where users could not obtain ip addresses from the DHCP server.

A different building with the same switches with the same IOS version and the same configuration were functioning correctly (as well as many others but on different VLANS.

I then took steps of restoring the previous working configuration and adding in the new configuration one line at a time. The changes that were being made was the implementation of dynamic arp inspection, port security and ip source guard.

If the command ip verify source was applied all was well (I checked this by shutting down ports, clearing the ip snooping binding table adding the command and then activating the ports again and checking if ip's were obtained.

The command ip verify source port-security was causing issues, which I originally thought that could have been caused by an option 82 issue, but it was allowed in the configuration and the DHCP server has had no issues with it in the past.

I then decided to upgrade the IOS version from 15.0(1)SE1 to 15.0(2)SE. This surprisingly fixed the issue and all was well with ip source guard once more.

Filed under: Cisco, Networking No Comments

Create new Windows Homegroup when there is an exisiting Homegroup on the network

Windows 7 Homegroup

I decided to try Homegroups between a windows 7 and Windows 8 to see if this really does facilitate easier sharing, while still being secure. I will leave my judgement for later as I only just configured this. I ran in to issues where a house mate had his own Homegroup on the existing network and I could not see an option to create one, only to join the existing one.

Steps to create a new one:

  1. Open up the Homegroup options within the control panel.
  2. Disable the network adapter / disconnect the Ethernet cable.
  3. Enable the network adapter and be prepared to create a new Homegroup quickly when the options appears.
  4. When the create new Homegroup option appears and quickly enter a password, as it will fail if it has enough time to find the exisiting Homegroup.
  5. Follow the prompts to set up and then insert your password on the other computers in the network like normal and it should automatically find the matching Homegroup.
Filed under: Software 17 Comments