Network does not allow two connections on the same plug?

[aakerman]

Hi

I work in a small subsidiary of a large corporation. Locally we are not allowed to have IT resources, so we have to try and fix things for ourselves.

I'm having an issue just connecting a new hire to the network. There is a plug (RJ45) in the wall that connects to the server, which is working fine. If you connect one pc, there is full access.

I have now installed a switch on that plug, and in that switch plugged in two pc's. However this doesn't work - it only allows one person access, the one that logged on first. The other person does not get access. If the first person goes home, the second person gets access after a while.

How can I fix this so I can have two people connect?

(both pc are windows 7)

 

[JackMDS]

It depends on where the wire (inside) goes from the plug to.

If it is connected to a source that allows only one IP you can not connect a second device.

 

[seepy83]

How can I fix this so I can have two people connect?

Call the corporate IT and ask them. I suspect that they will want to do this the right way, and run another network drop to that location. Placing network switches out on someones desk instead of secured in a network closet or back in the server room/datacenter is usually not allowed.

 

[ch33zw1z]

Call the corporate IT and ask them. I suspect that they will want to do this the right way, and run another network drop to that location. Placing network switches out on someones desk instead of secured in a network closet or back in the server room/datacenter is usually not allowed.

this. Contact IT, they'll "hook you up"

 

[ScottMac]

The switch could also have a security feature enabled where each port will only talk to one MAC (configurable for a higher count); so even adding another switch downstream doesn't help, because the host port on the enterprise switch will only permit traffic to a single MAC address.

You need to talk to the IT/IS department. They're probably waiting for your call, since (I would guess) that anyone that institutes this kind of policy, probably has some pretty good management and monitoring software.

When they're ready to force your call, they'll shut down the port. Call, confess, apologize and they will likely help you out. You may also want to review the enterprise policies too, just to make sure you are well-versed on what you can and cannot do.

 

[gsaldivar]

You could use a router instead of a switch, and just set the switch's MAC address to the same as your company's computer. Then plug the two computers into the router's LAN ports. Before attempting that, be damn sure that you follow your company's policy and you have permission to make changes to your local network.

 

[Zargon]

blargh.


dont be doing your own thing, contact the networking people and get it done right for petes sake

 

[JackMDS]

You could use a router instead of a switch, and just set the switch's MAC address to the same as your company's computer. Then plug the two computers into the router's LAN ports. Before attempting that, be damn sure that you follow your company's policy and you have permission to make changes to your local network.

Yeah you can, and do not forget to start looking for another place of employment.

 

[ScottMac]

You could use a router instead of a switch, and just set the switch's MAC address to the same as your company's computer. Then plug the two computers into the router's LAN ports. Before attempting that, be damn sure that you follow your company's policy and you have permission to make changes to your local network.

One of the other settings that frequently go with the MAC lock-down is setting the TTL from the upstream router such that adding one more hop expires the TTL and the packet is dropped.

This is also easy to track, chances are if you try it, "they" will know.

Good luck

 

[aakerman]

Thanks for the replies. Just to make it clear, I am not trying to be subversive or anything, but corporate IT is really really small and covers a huge area, so they usually don't want to spend time on this kind of thing (we are not a US based company). But I will try to get hold of them in regards to this anyway.

 

[RadiclDreamer]

Sounds like port security is enabled and with it enabled it will limit the number of mac addresses sourced from a port

 

[RadiclDreamer]

One of the other settings that frequently go with the MAC lock-down is setting the TTL from the upstream router such that adding one more hop expires the TTL and the packet is dropped.

This is also easy to track, chances are if you try it, "they" will know.

Good luck

He said he installed a switch though, a switch would not decrement the TTL value.

 

[ScottMac]

He said he installed a switch though, a switch would not decrement the TTL value.

Right. But with "number of concurrent connections" set to 1, he could have a dozen switches cascaded and still on get one host to connect.
I was responding to the "put in a router and use NAT" response.
Adding a router with a reduced TTL parameter set upstream would cause a timeout and discard.

 

[RadiclDreamer]

Right. But with "number of concurrent connections" set to 1, he could have a dozen switches cascaded and still on get one host to connect.
I was responding to the "put in a router and use NAT" response.
Adding a router with a reduced TTL parameter set upstream would cause a timeout and discard.

Got ya, just missed your direction i guess. Wanted to make sure folks didnt think the switch would decrement a TTL