Troubleshoot cisco mac address table cisco 2960x how to#

Troubleshoot cisco mac address table cisco 2960x how to#

You have asymetric routing, and while that can work, it's an exceptionally bad idea except in very specific circumstances.ДЄ) put a route on the Mikrotik telling it how to get back to VLAN 100 without going through the firewall (this will probably still mean clients in vlan 100 can't talk to anything else in vlan 1. Either some DHCP protection or just no rules allowing such traffic. The Mikrotik gets this request, but the only way it knows how to route to that subnet is via the firewall, so it responds and sends it's response to the firewall.ДЄt which point I'm betting the firewall blocks it for any number of reasons. Because the switch has a IP in that subnet then it sends it directly to the Mikrotik but it'll be from the IP address of the switch in VLAN 100 (because thats where the IP helper is). The switch sees it and turns it into a unicast request directed to the Mikrotik. What I suspect is happening is your client does a DHCP request. So, this setup is probably just wrong if the switch is only technically routing one of it's subnets but has interfaces in both. When ARP Conflict detection is on, it assigns addresses to 00:00:00:00:00:00 and the log has bunch of ARP conflicts. Update: it seems like a bug with Mikrotik. The switch has (firewallвЂ™s IP) (show ip default-gateway) as the default gateway, but hosts on VLAN 100 (when configured with a static address) can ping 10.5.1.1, but not 10.5.1.90. The Mikrotik is set up to only give out addresses on the 10.5.2.1/24 subnet, but is connected to VLAN 1.

The problem is that is I don't know if the helper is receiving DHCP requests from VLAN100 to forward them to 10.5.1.90.

Have set up a helper address as my DHCP server, which is a Mikrotik (10.5.1.90)