RE: Determine network devices on flat network

From: Church, Chuck (cchurch@wamnetgov.com)
Date: Mon Jan 05 2004 - 15:58:05 GMT-3


Do a ping sweep again, and capture your arp cache of the pinging device. Once you've got the MACs of the printers, look them up on the switches themselves. If they're HP printers, you may be able to find them by looking at your multicast info on the switches, if they're doing CGMP or IGMP. It's tedious, but it'll work. A service sweep looking for just port 515 or 9100 might help too.

Chuck Church
CCIE #8776, MCNE, MCSE
Wam!Net Government Services
13665 Dulles Technology Dr. Ste 250
Herndon, VA 20171
Office: 703-480-2569
Cell: 703-819-3495
cchurch@wamnetgov.com
PGP key: http://pgp.mit.edu:11371/pks/lookup?op=index&search=cchurch%40wamnetgov.com

> -----Original Message-----
> From: Kenneth Wygand [mailto:KWygand@customonline.com]
> Sent: Monday, January 05, 2004 1:42 PM
> To: ccielab@groupstudy.com
> Subject: Determine network devices on flat network
>
>
> Hello everyone and Happy New Year -
>
>
>
> I have about 20 switches set up as a flat network with no VLANs
> (10.0.0.0). Different device groups all have a common second octet
> (clients are 10.0.x.x, printers are 10.1.x.x, servers are
> 10.2.x.x) but
> the network is flat, as they all use a /8 (255.0.0.0) mask. The
> printers, for example, are scattered across all switches but have
> 10.1.x.x addresses. I need to find out what physical ports
> each printer
> is plugged into. I have ping-swept the 10.1.x.x range and found about
> 150 printers total. However, I need to now find out what switch port
> each printer connects to (actually all I need to know is which switch,
> not necessarily which port).
>
>
>
> I know I can just enable CDP on the switch and sniff the actual drop
> that each printer is connected to and analyze the advertised
> information
> from the switch to determine where each printer is located, but 150
> printers is too many to do this on. Is there any easier way to
> determine which switch each printer connects to? I'm
> thinking it has to
> employ some layer-2 technology, but since the network is flat, the ARP
> table will only reside on layer-3 devices (of which the switches are
> not).
>
>
>
> The network is entirely Cat3550 switches running SMI images.
>
>
>
> Any suggestions are greatly appreciated! Thanks!
>
>
>
> Kenneth E. Wygand
> Systems Engineer, Project Services
>
> CISSP #37102, CCNP, CCDP, ACSP, Cisco IPT Design Specialist, MCP, CNA,
> Network+, A+
> Custom Computer Specialists, Inc.
>
> "Treat your password as you do your toothbrush; change it every six
> months and don't let anyone else use it."
> -Anonymous
>
> ______________________________________________________________
> _________
> Please help support GroupStudy by purchasing your study
> materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Mon Feb 02 2004 - 09:07:37 GMT-3