Re: Restricting ports/services to specific interfaces

On Mon, 24 September 2001, mkrouse@co.ottawa.mi.us wrote:

> Here's the problem and I don't think subnets will help.  The token ring
> PC's are all reached by going through bridges, routers.   By looking at
> comm traces I can tell that ...
>
> If just the T/R interface is active - the DHCP traffic goes in/out through
> it using it's IP address (in LLC format) and the PC's get their IP
> addresses and everything works fine.
>
> If Ethernet and T/R interfaces are both active - DHCP requests are received
> on both interfaces, but the responses only go out the Ethernet interface
> (in ETHV2 and 802.3 format) and the PC's don't get IP addresses.
>
> I would like to force DHCP to use the T/R interface (or that IP address) as
> it seems that would solve the problem.

By this description of the problem, it seems like proper subnetting is the 
precise solution. If IP traffic cannot reach those PCs through the Ethernet 
interface, then it seems to me that the T/R PCs are on a different *physical* 
subnet; and if they are not configured as such, then the subnetting is 
configured incorrectly.

Subnetting is how DHCP knows which interface to talk through.

Tom Liotta

--
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
 http://www.compuserve.com/trycsrv/cs2000/webmail/