Weird Issue with OS 10.9.4 and Ethernet

[techie211]

hey ppl, our school has 3 mac labs. Two have been updated to OS 10.9.4. Under Network the 'Ethernet' is connected using DHCP. They are also bound to AD. No errors and all looks good. I then reboot and I am able to login using my network credentials. If I log off or reboot again I WILL NOT be able to login..??? Here is the weird part,

if I enable 'Wi-Fi' I am able to constantly login. Both Ethernet and Wi-Fi are configured using DHCP. I've googled this and I've read about the ARP fix..??? We are running Cisco switches so maybe I should check the ports for Spanning-tree or PortFast config..??? Anyone else experiencing this? Other Macs running 10.6.x have NO issues.

Any help on this is appreciated.

 

 

-J

[techie211]

Sooooo..noone else is experiencing this?

[techie211]

How can I add an new search policy via the CLI? I would like to add "/Active Directory/All Domains" only and remove the "/Active Directory//All Domains"

 

I tried this> dscl /Search -delete / CSPSearchPath "/Active Directory/xxxxxxxx/All Domains"

dscl /Search -append / CSPSearchPath "/Active Directory/All Domains"

but I get an error.

[FN-GM]

Can you post your configuration for one of the ports on the Cisco switch please?

[techie211]

GigabitEthernet1/0/3 is up, line protocol is up (connected)

Hardware is Gigabit Ethernet, address is 001f.267c.3a03 (bia 001f.267c.3a03)

MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA, loopback not set

Keepalive set (10 sec)

Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX

input flow-control is off, output flow-control is unsupported

ARP type: ARPA, ARP Timeout 04:00:00

Last input never, output 00:00:00, output hang never

Last clearing of "show interface" counters never

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 14000 bits/sec, 13 packets/sec

356049 packets input, 77643217 bytes, 0 no buffer

Received 61 broadcasts (0 multicasts)

0 runts, 2212 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

0 watchdog, 4 multicast, 0 pause input

0 input packets with dribble condition detected

4992575 packets output, 904550146 bytes, 0 underruns

0 output errors, 0 collisions, 1 interface resets

0 babbles, 0 late collision, 0 deferred

0 lost carrier, 0 no carrier, 0 PAUSE output

0 output buffer failures, 0 output buffers swapped out

[FN-GM]

Thanks, Thats more of a status, Can you post the output on the same port from a Sh Run (Show Running-Config) command please? Edited September 29, 2014 by FN-GM

[techie211]

SW3-3750-IDF600#sh run int Gi1/0/3

Building configuration...

 

Current configuration : 38 bytes

!

interface GigabitEthernet1/0/3

end

[FN-GM]

Wow no config at all. 3750 switches are good switches!

 

Do you know how to configure a Cisco switch port?

 

If so try addding this configuration on the port

 

Switchport Mode Access

Spanning-tree portfast

 

That will turn off the trunk auto negotiate and enable portfast (you where on the right lines).

[techie211]

Got this when enabling 'portfast':

 

SW3-3750-IDF600(config-if)#spanning-tree portfast

%Warning: portfast should only be enabled on ports connected to a single

host. Connecting hubs, concentrators, switches, bridges, etc... to this

interface when portfast is enabled, can cause temporary bridging loops.

Use with CAUTION

 

%Portfast has been configured on GigabitEthernet1/0/3 but will only

have effect when the interface is in a non-trunking mode.

 

- - - Updated - - -

 

SW3-3750-IDF600#sh run int gi1/0/3

Building configuration...

 

Current configuration : 86 bytes

!

interface GigabitEthernet1/0/3

switchport mode access

spanning-tree portfast

end

[techie211]

I should be good since I only have a computer connected. Do you think this will help with my users not logging on to the network via the Macs? I will test it out.

 

Thanks

[DMcCoy]

I've seen this (but only on one Mac) with non Cisco switches and the 10/100 usb dongle, nothing worked, except the ARP fix (Citrix on OSX 10.9 Mavericks | Citrix Blogs) Try it on one and see what happens, it's just one line in a config file.

[FN-GM]

That caution message is fine. You get that when enabling port fast. As we are only connecting a single host it will be fine.

 

It should help yes. Although I haven't got the full picture of your issue I have seen similar before. This fixed it.

[techie211]

Thanks to both of you. I will give it a try and post back results.

[techie211]

Ok, here's an update:

1- disabling the unicast ARP request using those commands did not work. Actually, it killed my internet connection. I had to undo it.

2 - configuring the Cisco port I 'think' it helped.

What I mean by I 'think' it helped is, if I reboot the Mac and try to logon for the first time it will take 30+ seconds before I get the 'shakes' not allowing me in.

When I try 5 seconds later to login by typing my password again I'm able to login and it only takes 2 seconds. If I logoff, I can login again no problem. It seems

like it's timing out if I reboot like it's resetting..???

[FN-GM]

It seems the initial network communication is taking its time.

 

What is it like on a Windows machine? Do windows machine pickup IP and connect to the network quickly? I am just trying to pin down if its a network issue or Mac issue.

[techie211]

Yes they do. I have no issues on the Windows side and I've tested with same users. I also have another Mac lab that's running 10.9.3 and same users have no problems logging on. I was thinking it was the Mavericks update but not really sure now. Can't pin point it.