<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='color:#1F497D'>There is a management console in
the IBM server. And the mac address for that console kept to shared mode. Due
to that the mac address was been shown on the network, and arp spoofing was
going on. After fighting for five days with Cisco found this problem. IBM guy
came and fixed the problem<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='color:#1F497D'>Warm Regards,</span><span
style='font-size:12.0pt;color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><u><span style='color:#1F497D'>Venkata Sasanka.pathi(-91 950
265 2290)<o:p></o:p></span></u></p>
<p class=MsoNormal><u><span style='color:#1F497D'>Consultant | unified
communications<o:p></o:p></span></u></p>
<p class=MsoNormal><u><span style='color:#1F497D'>Locuz Enterprise Solutions
Ltd. (A Subsidiary of 3i-Infotech)<o:p></o:p></span></u></p>
<p class=MsoNormal><u><span style='color:#1F497D'>Sudha House 3, Tilak Road
Abids, Hydrabad <o:p></o:p></span></u></p>
<p class=MsoNormal><u><span style='color:#1F497D'>Andhra Pradesh - 500 001<o:p></o:p></span></u></p>
<p class=MsoNormal><u><span style='color:#1F497D'>| Mobile: 09502652290 | Phone
: +91 -040 - 66115656</span></u><span style='color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Ahmed Elnagar
[mailto:ahmed_elnagar@rayacorp.com] <br>
<b>Sent:</b> Saturday, January 01, 2011 2:43 PM<br>
<b>To:</b> sasanka<br>
<b>Cc:</b> cisco-voip@puck.nether.net<br>
<b>Subject:</b> RE: [cisco-voip] SUB:Regd UCCX showing 2 mac address<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='color:#1F497D'>I think you should have a
security audit on your network as it seems someone is trying to hack on you
“most properly an internal user”…some layer 2 security mechanisms can solve
these issues.<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='font-family:"Arial","sans-serif";color:#1F497D'>Best
Regards,<o:p></o:p></span></p>
<p class=MsoNormal style='background:white'><span style='font-family:"Arial","sans-serif";
color:#1F497D'>Ahmed Elnagar | CCIE#24697 Voice</span><span style='color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> cisco-voip-bounces@puck.nether.net
[mailto:cisco-voip-bounces@puck.nether.net] <b>On Behalf Of </b>sasanka<br>
<b>Sent:</b> Tuesday, December 28, 2010 8:31 PM<br>
<b>To:</b> cisco-voip@puck.nether.net<br>
<b>Subject:</b> [cisco-voip] SUB:Regd UCCX showing 2 mac address<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>HI,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>We have a strange problem of uccx nic 1 showing 2
macaddresses. And 1 mac address is actually pointing to the default gateway. So
when use wireshark we are finding 2 mac addresses for the default gateway
ip. So by this the network is hanging frequently. We are actually facing
a problem of ARP Spoofing. Any suggestions are welcome<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='color:#1F497D'>Warm Regards,</span><span
style='font-size:12.0pt;color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><u><span style='color:#1F497D'>Venkata Sasanka.pathi(-91 950
265 2290)<o:p></o:p></span></u></p>
<p class=MsoNormal><u><span style='color:#1F497D'>Consultant | unified
communications<o:p></o:p></span></u></p>
<p class=MsoNormal><u><span style='color:#1F497D'>Locuz Enterprise Solutions
Ltd. (A Subsidiary of 3i-Infotech)<o:p></o:p></span></u></p>
<p class=MsoNormal><u><span style='color:#1F497D'>Sudha House 3, Tilak Road
Abids, Hydrabad <o:p></o:p></span></u></p>
<p class=MsoNormal><u><span style='color:#1F497D'>Andhra Pradesh - 500 001<o:p></o:p></span></u></p>
<p class=MsoNormal><u><span style='color:#1F497D'>| Mobile: 09502652290 | Phone
: +91 -040 - 66115656</span></u><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>Disclaimer:
NOTICE The information contained in this message is confidential and is
intended for the addressee(s) only. If you have received this message in error
or there are any problems please notify the originator immediately. The
unauthorized use, disclosure, copying or alteration of this message is strictly
forbidden. Raya will not be liable for direct, special, indirect or
consequential damages arising from alteration of the contents of this message
by a third party or as a result of any malicious code or virus being passed on.
Views expressed in this communication are not necessarily those of Raya.If you
have received this message in error, please notify the sender immediately by
email, facsimile or telephone and return and/or destroy the original message. <o:p></o:p></span></p>
</div>
</body>
</html>