Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Network Security: Firewall, NAT, QoS, IPS and more

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 02-13-2004, 05:01 AM
Wizard
 
Join Date: Jul 2003
Location: U.S.
Posts: 1,265
Default An interesting problem: arp and Astaro 3X versus 4

I ran into an interesting problem at a client site today that I would like to share with others for your edification:

A client had an Astaro 3X box's interface going through a switch to a gateway; we could ping and transfer packets to the gateway fine. The client went to cut in a 4X box: pinging was no longer happening. Our first impression was that it was something being done 'wrong' on the 4X box.

arp's showed as "incomplete" on the interface. We then cut in a crossover cable: bang, pings and packet transfers worked. We replaced the switch with another brand of switch, and then that too worked.

So to recap, a switch that worked with Astaro 3X wouldn't work with Astaro 4X (!).

So it was either due to changes in the network stack of the different Linux kernels and how arps are composed, or changes in the drivers between the OS's (Ethernet packet fragmentation, framing, padding, etc.). The newer format arps could not be handled by the mediocre brand switch.

Something to look out for when you're upgrading: use a crossover cable in your testing if you hit the wall...
Reply With Quote
  #2 (permalink)  
Old 02-13-2004, 05:27 AM
Wizard
 
Join Date: Jun 2003
Location: geocenter
Posts: 623
Default Re: An interesting problem: arp and Astaro 3X vers

Where is the mystery? Flush the ARP cache on the switch (some seem to have incredible high default timeout values) - that's it.

Greetings
cyclops
Reply With Quote
  #3 (permalink)  
Old 02-13-2004, 05:33 AM
Wizard
 
Join Date: Jul 2003
Location: U.S.
Posts: 1,265
Default Re: An interesting problem: arp and Astaro 3X vers

But what if I told you the switch was repowered?
AND the arps were cleared from the interfaces??

Upon repinging after all that, no go; new arps showing again as "incomplete".

Put back the 3X box: works...

One other possibility: maybe the switch couldn't handle the value of the MAC address of the new box's NIC?
Unlikely, but listing EVERY possibility...

P.S. All cables checked...

P.P.S. Different ports on the switch were used; the behavior was consistent across multiple ports...
Reply With Quote
  #4 (permalink)  
Old 02-14-2004, 01:00 AM
Member
 
Join Date: Jan 2004
Location: St.Louis, MO USA
Posts: 92
Default Re: An interesting problem: arp and Astaro 3X vers

Just out of curoisty what type (brand) switch was it ?
Reply With Quote
  #5 (permalink)  
Old 02-14-2004, 03:32 AM
Wizard
 
Join Date: Jul 2003
Location: U.S.
Posts: 1,265
Default Re: An interesting problem: arp and Astaro 3X vers

Dlink...

(you asked; I didn't volunteer it...)
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 12:52 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.