E1200 odd roque DHCP server problem
My local network connected to AT&T Uverse has both len and wiress connections. with some devices specified in the DHCP reservations list. all has worked fine for a while now. the UVerse modems do not support DHCP reservation configurations.
last weekend, one of my Linux machines (in the DHCP reservation list) suddenly changed its address from 192.168.2.34 (dhcp server at 192.168.2.1 as confgured) to 192.168.1.105 (dhcp server at 192.168.1.251). I couldn't find the second DHCP server, and eventually put iptables on my linux box to drop packets from that server and get back up and running.. spent sat/sunday fixing this.
Monday it happened again!.. even tho the iptables was still set to drop the packets!.. I found a dhcp roque utility for windows and started isolating parts of my network til I was down to two machines.. one windows and the E1200.
I ended up using the admin UI on the E1200 to restore the router to default and reconfigure back to operation, and the rogue DHCP server is gone!... I did NOT try to power off/on the router.
I do not know how this happened. Altho the E1200 was in the UVerse modem DMZ (so I could get DDNS to work) , I changed the userid and password, did not have wireless admin access or Wan admin acces enabled. It seems 'unlikely' that the router had been hacked, but I have no other explanation unless there is a pretty serious firmware bug. I have found other reports of similar behavior on other vendors routers, which seem to be caused by a loss of the wan link AND having DHCP reservation machines.
I have not tried to recreate the scenario. any ideas welcomed.
config
ATT Pace modem, DHCP on, wireless on, address range 192.168.1.2- 192.168.1.40, dhcp server at 192.1.1
ethernet cable from ATT modem to 1200 'wan' port.
1200 DCHP on, base address 192.168.2.1, dhcp range 192.168.2.2-192.168.2.200, wireless on
out of E1200
ethernet to local machine
ethernet to Insteon automation hub
ethernet to 4 port ethernet switch on other side of room
switch to local windows machine (dhcp reservation address 192.168.2.106)
switch to back of Dlink 1522 Access point, providing wireless to TV, Blueray player and roku box, access point address 192.168.2.5 in E1200 DHCP reservations list. DHCP off on 1522
back of dlink (4 port switch) ethernet to linux machine. 2 ft away.
back of dlink (4 port switch) to NAS storage device.
Brother multi-function laser configured fixed address Wirless to 1200 (192.168.2.195), need wireless for tablet/iphone/ipad print support.
so we have 1 ethernet network, and 3 wifi networks. (all 2.4mhz)
(my dauther and son-in-law here as they move back to local area from Chicago, have connectivity issues with wireless on 1200, due to house walls, not so much on UVerse modem. 1522 dedicated to entertainment systems.
Only the ethernet connected Linux box experienced this dhcp problem.
the roque dhcp server was at 192.168.1.251, and provided ip address 192.168.1.105
note that AT&T DHCP is 192.168.1.255
Similar Messages
-
Hi
My 5508 WLC which runs version 7.4.100.60 is configured as a DHCP server for the AP management and here's my problem:
Client can not get the address,I am in location at 1F of AP, obtain an IP address and associated to this AP, but I got to address is the address section 2F instead of 1F address above. In this WLC the AP, power and channel have not been optimized, the adjacent channels are AP 1, the power display is 1.
Last night I test, disconnect reconnect several times, I was able to get to the same network to a different IP address.My AP is 1602I. LoaderVersion 15.2<2> JAX . This is why ?Cisco Controller) >show interface summ
Number of Interfaces.......................... 17
Interface Name Port Vlan Id IP Address Type Ap Mgr Guest
management LAG 421 10.217.147.45 Static Yes No
redundancy-management LAG 421 0.0.0.0 Static No No
redundancy-port - untagged 0.0.0.0 Static No No
service-port N/A N/A 10.215.29.165 Static No No
t2-2f LAG 608 10.215.69.125 Dynamic No No
t2-1f LAG 609 10.215.68.253 Dynamic No No -
Hi guys,
i have problem use nac server as dhcp server at different subnet.
one thing that i want to know is dhcp in NAC server support unicast dhcp messages ?
because when client use layer 2 connection to nac server, dhcp works fine. i think they use dhcp broadcast message.
thanksHi,
Ensure your internal network can ping the DHCP server, which in this case I think is your Hyper-V host. This probably requires that you configure an IP address on your Hyper-V host that matches the subnet you have configured on the DHCP scope.
When you add a virtual network to Hyper-V, this will add a virtual network adapter on the Hyper-V host. You can see the adapter in ipconfig with a name that matches the name of the virtual switch, for example: Ethernet adapter vEthernet (Internal Network).
I'm not sure what your goals are here. It sounds like you want to give the VMs access to the Internet, which can be done much more simply by just creating an External virtual network rather than an Internal one with NAT.
Whatever your configuration, consider that DHCP works only one of two ways:
1. DHCP server exists on the same subnet as the scope subnet and shares one of these subnet IP addresses.
2. DHCP server has a different IP address than the scope, and clients use DHCP relay to get to the DHCP server.
If you don't have a DHCP relay, then you must use the first method.
-Greg -
Dhcp server won't admit my Arch Linux (though Win's have no problems)
1. Generally my dhcpcd works fine in every network (and always has, I have not changed anything substantial).
2. Currently I am in a network (for just a couple of weeks) in which it does not.
3. The network will ignore all my dhcp requests over both network devices, enp1s0 and wlp2s0 (ethernet and wifi)
4. When trying the same from Windows (dual boot), the dhcp client works brilliantly (i.e. the hardware is fine)
5. I can force entry into the cable network by simply assigning an IP address and setting netmask and gateway as was configured by dhcp when I tried from Windows
6. For wifi this does not work. More specifically it works for a brief moment if (and only if) I was connected from Windows immediately before and assign myself the same IP address (I can ping the gateway and also 8.8.8.8). After this moment the network apparently kicks me out (cannot ping anything any more, nothing answers). dhcpcd inform (dhcpcd -s <IP Adress>) does not fare better.
7. I tried changing some of the settings in dhcpcd.conf that have been given as reasons for similar problems in the forums, archwiki, or somewhere else, including exchanging 'duid' for 'clientid', and commenting out 'require dhcp_server_identifier'. Does not help. My dhcpcd.conf, see below.
8. dhclient does not work either.
What I want: Connect to the internet via wifi from Arch.
I guess this comes down to making the dhcp server believe my Arch was one of the Windowses it is used to. How do I do that?
I understand that dhcp does not involve clients revealing their operating systems to the servers; but some configurations are likely different between Arch and Windows. I am not used to working with Windows and have no idea how to access the dhcp client configuration settings there (if this is even possible) to get an idea what exactly is different. Here is my dhcpcd.conf - any ideas what exactly about it displeases the server so much or what I might change or add to make the server more pleasantly inclined?
dhcpcd.conf
hostname
clientid
#duid
persistent
option rapid_commit
option domain_name_servers, domain_name, domain_search, host_name
option classless_static_routes
option ntp_servers
#require dhcp_server_identifier
nohook lookup-hostname
noipv4ll
I would include the logs as well, but they are boring beyond belief, do not contain anything except for dhcpcd trying and failing with timeout.Thanks, MoonSwan & ewaller,
MoonSwan wrote:Windows' IP address and network settings navigate to: Control Panel -> Network and Internet -> Network Connections -> Click on Device Here (WIFI or LAN) -> Properties and from there you should be able to see the settings you need to figure out what's going on in Windows.
Found that, There are a lot of "Advanced properties", for instance "Bandwidth Capacity" is set to "11b/g: 20MHz", "BSS Mode" is set to "802.11n Mode", "Fragmentation Threshold" to "2346" (whatever that may mean) ... etc. Unfortunately, I cant copy any of that; most of it also seems rather unimportant; also I left all this on its default setting when I followed the instructions on how to connect to this wifi on Windows.
However, here is some information I managed to squeeze out of the pathetic, pittyful Windows terminal which they call the "Comand Line"
C:\Windows\system32> ipconfig /all
<...>
Wireless LAN adapter Wireless Network Connection:
Connection-specific DNS Suffix . : <the network name>
Description . . . . . . . . . . . : <hardware description> 802.11b/g/n (2.4GHz)
Physical Address. . . . . . . . . : <the mac address>
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : <some ipv6> %13(Preferred)
IPv4 Address. . . . . . . . . . . : <the ipv4> (Preferred)
Subnet Mask . . . . . . . . . . . : <subnet mask>
Lease Obtained. . . . . . . . . . : Fri, 23. May 2014 19:47:10
Lease Expires . . . . . . . . . . : Fri, 23. May 2014 21:17:09
Default Gateway . . . . . . . . . : <gateway ip>
DHCP Server . . . . . . . . . . . : <some ip that is not part of the local subnet>
DHCPv6 IAID . . . . . . . . . . . : 319352249
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-9F-0F-D6-E0-DB-55-CF-26-6
DNS Servers . . . . . . . . . . . : <a few dns server ip's>
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : <some ipv6> (Preferred)
Link-local IPv6 Address . . . . . : <another ipv6> %12(Preferred)
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel adapter 6TO4 Adapter:
Connection-specific DNS Suffix . : <the network name>
Description . . . . . . . . . . . : Microsoft 6to4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : <some ipv6> (Preferred)
Default Gateway . . . . . . . . . : <another ipv6>
<yet another ipv6>
DNS Servers . . . . . . . . . . . : <the same ipv4 dns server ip's as above>
NetBIOS over Tcpip. . . . . . . . : Disabled
C:\Windows\system32> netsh wlan show all
Wireless System Information Summary
(Time: 23.05.2014 20:38:49 W. Europe Daylight Time)
=======================================================================
============================== SHOW DRIVERS ===========================
=======================================================================
Interface name: Wireless Network Connection
Driver : <hardware description> 802.11b/g/n (2.4GHz)
Vendor : Broadcom
Provider : Broadcom
Date : 21.01.2012
Version : 6.20.55.31
INF file : C:\Windows\INF\oem25.inf
Files : 5 total
C:\Windows\system32\DRIVERS\BCMWL664.SYS
C:\Windows\system32\bcmihvsrv64.dll
C:\Windows\system32\bcmihvui64.dll
C:\Windows\system32\drivers\vwifibus.sys
C:\Windows\system32\bcmwlcoi.dll
Type : Native Wi-Fi Driver
Radio types supported : 802.11n 802.11g 802.11b
FIPS 140-2 mode supported : Yes
Hosted network supported : Yes
Authentication and cipher supported in infrastructure mode:
Open None
Open WEP
Shared None
Shared WEP
WPA2-Enterprise TKIP
WPA2-Personal TKIP
WPA2-Enterprise CCMP
WPA2-Personal CCMP
WPA2-Enterprise Vendor defined
WPA2-Enterprise Vendor defined
Vendor defined Vendor defined
Vendor defined Vendor defined
Vendor defined TKIP
Vendor defined CCMP
Vendor defined Vendor defined
Vendor defined Vendor defined
WPA-Enterprise TKIP
WPA-Personal TKIP
WPA-Enterprise CCMP
WPA-Personal CCMP
Authentication and cipher supported in ad-hoc mode:
WPA2-Personal CCMP
Open None
Open WEP
IHV service present : Yes
IHV adapter OUI : [00 10 18], type: [00]
IHV extensibility DLL path: C:\Windows\System32\bcmihvsrv64.dll
IHV UI extensibility ClSID: {aaa6dee9-31b9-4f18-ab39-82ef9b06eb73}
IHV diagnostics CLSID : {00000000-0000-0000-0000-000000000000}
=======================================================================
============================= SHOW INTERFACES =========================
=======================================================================
There is 1 interface on the system:
Name : Wireless Network Connection
Description : 802.11b/g/n (2.4GHz)
GUID : 6d122ca5-cdc2-42d1-a1fb-3754098b19eb
Physical address : <the mac address>
State : connected
SSID : <ssid>
BSSID : <access point mac address>
Network type : Infrastructure
Radio type : 802.11n
Authentication : WPA2-Enterprise
Cipher : CCMP
Connection mode : Auto Connect
Channel : 1
Receive rate (Mbps) : 72
Transmit rate (Mbps) : 72
Signal : 83%
Profile : <ssid>
Hosted network status : Not available
=======================================================================
=========================== SHOW HOSTED NETWORK =======================
=======================================================================
Hosted network settings
Mode : Disallowed
Settings : <Not configured>
Hosted network status
Status : Not available
=======================================================================
============================= SHOW SETTINGS ===========================
=======================================================================
Wireless LAN settings
Show blocked networks in visible network list: No
Only use GP profiles on GP-configured networks: No
Hosted network mode allowed in WLAN service: No
Allow shared user credentials for network authentication: Yes
Block period: Not Configured.
Auto configuration logic is enabled on interface "Wireless Network Connection"
=======================================================================
============================== SHOW FILTERS ===========================
=======================================================================
Allow list on the system (group policy)
<None>
Allow list on the system (user)
<None>
Block list on the system (group policy)
<None>
Block list on the system (user)
<None>
=======================================================================
=========================== SHOW CREATEALLUSER ========================
=======================================================================
Everyone is allowed to create all user profiles.
=======================================================================
============================= SHOW PROFILES ===========================
=======================================================================
Profiles on interface Wireless Network Connection:
Group policy profiles (read only)
<None>
User profiles
All User Profile : <ssid>
<other profile names>
=======================================================================
========================== SHOW PROFILES NAME=* =======================
=======================================================================
Profile eduroam on interface Wireless Network Connection:
=======================================================================
Applied: All User Profile
Profile information
Version : 1
Type : Wireless LAN
Name : <ssid>
Control options :
Connection mode : Connect automatically
Network broadcast : Connect only if this network is broadcasting
AutoSwitch : Do not switch to other networks
Connectivity settings
Number of SSIDs : 1
SSID name : "<ssid>"
Network type : Infrastructure
Radio type : [ Any Radio Type ]
Vendor extension : Not present
Security settings
Authentication : WPA2-Enterprise
Cipher : CCMP
Security key : Absent
802.1X : Enabled
EAP type : Microsoft: Protected EAP (PEAP)
802.1X auth credential : Machine or user credential
Cache user information : Yes
<other profiles ...>
=======================================================================
======================= SHOW NETWORKS MODE=BSSID ======================
=======================================================================
Interface name : Wireless Network Connection
There are 4 networks currently visible.
SSID 1 : eduroam
Network type : Infrastructure
Authentication : WPA2-Enterprise
Encryption : CCMP
BSSID 1 : <other access point ssid>
Signal : 2%
Radio type : 802.11n
Channel : 11
Basic rates (Mbps) : 1 2 5.5 11
Other rates (Mbps) : 6 9 12 18 24 36 48 54
BSSID 2 : <other access point ssid>
Signal : 0%
Radio type : 802.11n
Channel : 11
Basic rates (Mbps) : 1 2 5.5 11
Other rates (Mbps) : 6 9 12 18 24 36 48 54
BSSID 3 : <access point ssid>
Signal : 87%
Radio type : 802.11n
Channel : 1
Basic rates (Mbps) : 1 2 5.5 11
Other rates (Mbps) : 6 9 12 18 24 36 48 54
BSSID 4 : <other access point ssid>
Signal : 0%
Radio type : 802.11n
Channel : 1
Basic rates (Mbps) : 1 2 5.5 11
Other rates (Mbps) : 6 9 12 18 24 36 48 54
SSID 2 : <...>
What I find odd is this "Taredo Tunneling Pseudo-Interface". As a matter of fact, I have not the slightest idea if this is happening inside this local Windows I have here or if this is something real in the network configuration (on the other side of the access point)... It apparently should tunnel IPv6 to IPv4 and/or vice versa. However, why would there be two connections over the same network interface (IPv6 and IPv4)...
What is odd as well is that the DHCP server is not part of the subnet my Windows is in. It just seems to announce IP, netmask, gateway to the Windows ... (the gateway is in the subnet). Could it be that the Linux dhcp client does not accept something like that. No, that's unlikely, right? dhcpcd -d should have reported this...
MoonSwan wrote:Btw, love the name,
Thanks. Likewise
MoonSwan wrote:it's nice to see such a name after seeing so many that are intentionally hurtful to others of any stripe in a rainbow.
Actually, I always felt that the Arch Forum is quite tolerant in this respect. (And so is reddit, but of course, you are right, there are places on the internet where you can run into a lot of assholes. Kind of like in the real world... Quite frustrating.)
ewaller wrote:I guess it could be a MAC problem. but I don't know.
Unlikely; on windows the mac address is the same.
ewaller wrote: Can you get to the router logs? Can you see if the router saw a solicitation?
no. and given their network configuration I don't suppose the IT people here would be very forthcoming if I asked them. Their helpdesk said that they couldn't help me since my laptop was not one of their computers.
ewaller wrote:Also, (just a sanity check) are you sure you are connected to the correct access point? But that does not make sense -- you said this happens on wired as well sad
Dang.
I am. It's WPA2 encrypted & I only have access data to this one wifi network. (To avoid confusing everyone with mentioning too many different things, I did not detail this in the original post. I am accessing it using wpa_supplicant running in a terminal; wpa_supplicant works fine says "connection succeeded" etc. So the problem is not in the WPA/ wifi-connection layer but really in the IP/dhcp layer.)
ewaller wrote:Is this a corporate environment? A school perhaps?
Yes, a university. They have someone working here who went through great lengths to make it difficult for people to connect to the internet. -
PXE boot problem: guest VM DHCP request packets not able to reach DHCP server
Hi Gurus,
I'm wondering if anyone could help me with this problem. I wanted to install Linux on Oracle VMs using PXE. I set up a DHCP server and the OVM running RHEL6.4 box. The DHCP server worked fine since other PHYSICAL servers could get IPs from this DHCP server. However, DHCP requests from Oracle VMs was not able to reach the DHCP server. So I suspect this is a VM-specific issue.
If I type in "dhcp net0" on gPXE prompt on the OVS machine(sappire), I can see the requests were being sent from the OVS server (sapphire):
gPXE> dhcp net0
DHCP (net0 00:21:f6:00:00:00) .............................................Connection time out (0x4c106035)
Could not configure net0: Connection time out (0x4c106035)
gPXE>
[root@sapphire ~]# tcpdump -i any -n udp dst portrange 67-68
tcpdump: WARNING: Promiscuous mode not supported on the "any" device
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
20:47:25.606400 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:21:f6:00:00:00, length: 387
20:47:25.606549 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:21:f6:00:00:00, length: 387
20:47:25.606559 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:21:f6:00:00:00, length: 387
^C
12 packets captured
14 packets received by filter
0 packets dropped by kernel
But if I snoop the same on the RHEL6.4 server running DHCP server and OVM, no request can be seen:
[root@bluestone Desktop]# tcpdump -i any -n udp dst portrange 67-68
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes
^C
0 packets captured
0 packets received by filter
0 packets dropped by kernel
OVS(sapphire) and OVM(bluestone) are located in the same subnet:
[root@bluestone network-scripts]# ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:14:22:72:7C:27
inet addr:192.168.2.48 Bcast:192.168.2.255 Mask:255.255.255.0
inet6 addr: fe80::214:22ff:fe72:7c27/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:106795 errors:0 dropped:0 overruns:0 frame:0
TX packets:122056 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:59173975 (56.4 MiB) TX bytes:25362955 (24.1 MiB)
[root@sapphire ~]# ifconfig -a
10049df2fc Link encap:Ethernet HWaddr 8A:C5:05:83:AF:C9
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:80 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:33200 (32.4 KiB) TX bytes:0 (0.0 b)
eth0 Link encap:Ethernet HWaddr 00:1A:64:64:DA:64
inet addr:192.168.2.202 Bcast:192.168.2.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:37664 errors:0 dropped:0 overruns:0 frame:0
TX packets:38939 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4537897 (4.3 MiB) TX bytes:23127790 (22.0 MiB)
eth0:0 Link encap:Ethernet HWaddr 00:1A:64:64:DA:64
inet addr:192.168.2.212 Bcast:192.168.2.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
[root@sapphire ~]# brctl show
bridge name bridge id STP enabled interfaces
10049df2fc 8000.8ac50583afc9 yes tap7.0
tap7.1
vif7.0
vif7.1
I turned off iptables and SELinux on the DHCP server, the issue still remained.
Any help will be highly appriciaited.
Thanks in advance,
AlexHi,
- Do you install Oracle VM Server (OVS) on an emulated environment like Oracle VM VirtualBox ? if yes so you can't do it.
- Don't forget to configure the Virtual Machines Network and also to add this network to this Virtual Machine.
I hope this can help you
Best Regards -
Time Capsule/AirPort Express problem with DHCP server
Hi everyone,
I seem to be having some weird issue with my home network. I use a Time Capsule (2011) as my main router and a new AirPort Express as a wireless bridge (router set to "Extend a wireless network", the LAN port is connected to network printer). Recently, it seems that at least once or twice a week that the DHCP server on my router stops working. Computers that have static IP addresses have no problem accessing the internet or my local network, but devices that don't have static IPs are unable to join the network (over Wi-Fi or ethernet) because they are not being assigned an IP. This never happened before. I'm not sure if it has anything to do with the recent firmware update. Anybody else seem to be having this problem? I am able to get the DHCP server working again by restarting the Time Capsule or by setting the computer or device that won't connect to a static IP. Really curious why this seems to be happening…
Thanks for all the help guysI am having the same problem with the same setup: a 2011 Time Capsule and an Airport Express. I've had my Aiport Express hooked in for about 2 years, so I know it is not the problem. The only difference I have is the DHCP will stop working on the ethernet, but still work over WiFi from the TC. Rebooting the Time Capsule fixes the DHCP issue.
I am running version 7.6.4 in the Time Capsule. -
Problems trying to migrating ports to a new Vlan using an externar DHCP server
Hello, here is the thing. I have the following configuration in my Core Switch:
interface Vlan1
ip address 10.24.74.1 255.255.254.0 secondary
ip address 192.0.2.54 255.255.255.0
ip helper-address 10.24.86.22
no ip redirects
As you see, we are using an external DHCP server for the Vlan1 and it is working:
Internet 192.0.2.98 0 3c97.0e23.3d8d ARPA Vlan1
Internet 192.0.2.194 0 e89a.8f77.36a0 ARPA Vlan1
Internet 192.0.2.195 0 e89a.8f77.01ab ARPA Vlan1
Internet 192.0.2.198 2 001c.25de.acaa ARPA Vlan1
Internet 192.0.2.199 0 d8eb.97a6.30a4 ARPA Vlan1
Internet 192.0.2.196 0 f0de.f1f1.1e06 ARPA Vlan1
Internet 192.0.2.203 0 e89a.8f77.016f ARPA Vlan1
Internet 192.0.2.207 4 d0c7.89d6.3ba3 ARPA Vlan1
Internet 192.0.2.211 0 4437.e636.7ef7 ARPA Vlan1
But, when a try to migrate this port to a new Vlan (Vlan50), I got the following issue:
001290: Jul 23 08:27:44.705 GMT: DHCPD: DHCPREQUEST received from client 013c.970e.233d.8d.
001291: Jul 23 08:27:44.705 GMT: DHCPD: client has moved to a new subnet.
001292: Jul 23 08:27:44.705 GMT: DHCPD: Sending DHCPNAK to client 013c.970e.233d.8d.
001293: Jul 23 08:27:44.705 GMT: DHCPD: broadcasting BOOTREPLY to client 3c97.0e23.3d8d.
001294: Jul 23 08:27:44.725 GMT: dhcp_snooping_get_ingress_port: Interface src_index 0xF
001295: Jul 23 08:27:44.725 GMT: DHCPD: DHCPDISCOVER received from client 013c.970e.233d.8d on interface Vlan50.
001296: Jul 23 08:27:44.725 GMT: DHCPD: there is no address pool for 10.24.76.1.
001297: Jul 23 08:27:44.725 GMT: DHCPD: setting giaddr to 10.24.76.1.
001298: Jul 23 08:27:44.725 GMT: DHCPD: BOOTREQUEST from 013c.970e.233d.8d forwarded to 10.24.86.21.
Any suggestions,
Thank you in advance,Just to help someone who has the same issue.
I found this on the web site:
When the server receives a DHCPREQUEST from a client in the RENEWING (or REBINDING) state, it normally grants the renewal only if the client has an unexpired lease with this server. Otherwise the server ignores the request; the server to which the client is bound should answer the client. (The only exception is normally that if a server is sure the IP address the client is asking for is inappropriate for the client, the server will send a DHCPNAK, which forces the client back to the INIT state.)
Thank you anyway -
DHCP server migration problem (2008 R2 to 2012 R2)
Hi,
I want to migrate my DHCP server from 2008 R2 to 2012 R2 server.I exported dhcp configuration by issuing export-dhcpserver command on 2012 R2 server.
And now, when I try to import xml into new server I see error during import:
VERBOSE: Importing option definitions on server...
Import-DhcpServer : Failed to add option definition 249 on DHCP server server.lbank.msft. : The specified option
already exists. (20009)
At line:1 char:1
+ Import-DhcpServer -ComputerName server.lbank.msft -File D:\Darbinis\dhcp\dhc ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : ResourceExists: (249:root/Microsoft/...ptionDefinition) [Import-DhcpServer], CimExceptio
n
+ FullyQualifiedErrorId : DHCP 20009,Import-DhcpServer
How to troubleshoot such error? Thanks.I have used the following resources and still had DHCP Migration Failure.
http://blogs.technet.com/b/teamdhcp/archive/2012/09/11/migrating-existing-dhcp-server-deployment-to-windows-server-2012-dhcp-failover.aspx
http://blogs.technet.com/b/kevinholman/archive/2013/09/25/migrating-dhcp-services-to-2012-r2-and-configuring-scope-failover.aspx
http://technet.microsoft.com/en-us/windowsserver/dd448608.aspx
http://technet.microsoft.com/en-us/library/dn495425.aspx
http://technet.microsoft.com/en-us/library/dd379535(WS.10).aspx -
BEFW11S4 limited connectivity DHCP server not contacted
We have a network that has been running fine until a couple of days ago. We have changed no settings, yet now some of our wireless computers get the limited or no connectivity error. They are failing when trying to get the IP address assigned.
We're running 128 bit WEP encryption. My desktop machine which is hardwired to the router is fine, a hardwired network printer adapter is fine, and oddly enough two machines running Vista with a wireless connection are fine. It's my laptop, and a couple of my kid's laptops, all runnning XP Pro SP2, that are having problems.
I've tried ipconfig /release and /renew. The /renew times out, unable to contact the DHCP server.
I also tried the EasyLink Advisor software on my laptop. t tells me I need a wired connection.
One other piece of information; occassionally one of my sons have said they could not connect to the internet (on on of the XP machines) and I have powered the BEFW11S4 off an on, and then they were able to connect. I've never had this problem my laptop. But that's not working for anyone now.
I am at a loss as to why a network configuration that has been working perfectly well for over a month would selectively stop talking to computers with a certain operating system. Unless Microsoft has pushed an XP update recently that might have broken things?have you tried upgrading / reflashing router's firmware .. if not , try it..after the upgrade , reset and reconfigure the router..check whether it makes any difference..
-
OS X server, DHCP Server and random blocked IPs
Hello !
I use a Mac Mini as a DHCP server for my wireless network. It is connected to internet through a wired modem and gives an IP (through Airport) to the computers that ask for it.
Everything works quite fine... Unless, sometimes, clients obtain an adress but cannot browse the web nor connect to local network. The ip is just "blocked".
If i try to use it on an other computer (manually), it just doens't work.
So, I must change the ip, by changing the DHCP Name of the computer (otherwise, the server always give the same adress), to fix the problem.
What is strange, is that a few time after, the incriminated ip works new ! Until it is down again...
My bootpd config file is the fallowing;
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>NetBoot</key>
<dict/>
<key>Subnets</key>
<array>
<dict>
<key>allocate</key>
<true/>
<key>dhcpdomainname</key>
<string>antoine.maille.priv</string>
<key>dhcpdomain_nameserver</key>
<array>
<string>81.253.149.1</string>
<string>80.10.246.3</string>
<string>10.0.0.1</string>
</array>
<key>dhcpldapurl</key>
<array>
<string>ldaps://Mac Mini/</string>
</array>
<key>dhcp_router</key>
<string>10.0.0.1</string>
<key>lease_max</key>
<integer>604800</integer>
<key>leasetimesecs</key>
<string>86400</string>
<key>name</key>
<string>DHCP WiFi</string>
<key>net_address</key>
<string>10.0.0.0</string>
<key>net_mask</key>
<string>255.255.255.0</string>
<key>net_range</key>
<array>
<string>10.0.0.10</string>
<string>10.0.0.100</string>
</array>
<key>selectedportname</key>
<string>en1</string>
<key>uuid</key>
<string>FEB30FD5-3749-480E-9FEB-BD2C20206431</string>
</dict>
</array>
<key>allow</key>
<array/>
<key>bootp_enabled</key>
<true/>
<key>deny</key>
<array/>
<key>detectother_dhcpserver</key>
<true/>
<key>dhcp_enabled</key>
<true/>
<key>oldnetbootenabled</key>
<false/>
<key>relay_enabled</key>
<true/>
<key>relayiplist</key>
<array/>
<key>timeServiceStarted</key>
<string>2008-11-26 22:59:19 +0100</string>
</dict>
</plist>
Do you have any idea of what I should do to fix that problem ?
Thanks !
alexBrandon Macinnis wrote:
Dnar,
Thanks for the follow up bit about using the smbutil statshares command. I used that and could confirm that I am also able to force it to connect with smb2. Oddly though, in the stat share info it still says "AUTO_NEGOTIATE"
SMB_NEGOTIATE AUTO_NEGOTIATE
SMB_VERSION SMB_2.1
But maybe that just means something else and not the fact that it did not auto negotiate to SMB. I guess for now this will be what I have to do to use smb2.
I think in this case the AUTO_NEGOTIATE merely means it will auto negotiate a connection between SMB1, SMB2, and (from your data) also SMB2.1 this would have nothing to do with auto negotiating between SMB2 and AFP, which from this thread appears broken.
I also would like to thank Brandon for the tip about smbutil statshares, I had been looking for a simple way to tell what version of SMB was being used to test my NAS.
For everyone's benefit, it would appear from the above that whilst Apple advertise Mavericks as using SMB2 they have gone as far as implementing SMB2.1 and merely list it only as SMB2 for simplicity and due to the fact there is not a huge different between SMB2 and SMB2.1
See http://en.wikipedia.org/wiki/Server_Message_Block#SMB_2_and_3 -
I recently purchased an E3000 and immediately upgraded to the latest firmware version,1.0.03 build 2 Sep 7, 2010 . I've noticed a few issues with the DHCP server.
First, some entries appear to drop out of the DHCP client table before their DHCP lease expires. This has happened with several Windows 7 clients and with a pair of Linksys WRT54GS routers that obtain their IP addresses from the DHCP server in the E3000.
Second, I have two Netgear GS108Tv2 switches attached to the E3000. When these switches are running firmware version 5.0.0.8 they can obtain IP addresses from the E3000, but I can't access them using a web server. When these switches are running firmware version 5.0.1.11 they fail to obtain IP addresses from the E3000. I suspect the DHCP client in these two devices has a problem and I have reported this behavior to Netgear, but I believe the DHCP server in the E3000 may also be part of the problem. Why? Because I connected the switches to one of the WRT54GS routers mentioned above and they were able to obtain IP addresses from the DHCP server in the WRT54GS, which is a model 7.0 running firmware versionv7.50.8 build 001, Oct. 5, 2009 .
Finally, a question regarding DHCP reservations with the E3000. When creating a DHCP reservation, does the assigned IP address have to come from the scope of addresses assigned to the DHCP server? For example, I have configured the start IP address for the DHCP server in the E3000 to be 192.168.1.64 and the maximum number of users to be 64. However, I have created reservations for IP addresses 192.168.1.10 and 192.168.1.20 for the two WRT54GS routers mentioned above. I have also created a reservation for two clients within the assigned range as well. All assignments appear to be working correctly, but I would like to confirm that both approaches are kosher.
Thanks in advance.On 04/27/2011, I opened a case with LinkSys/Cisco support concerning lost DHCP Client Table entries on both my new E3000 V1.0 router (running firmware upgrade 1.0.4) and it's WRT54G V8.0 predecessor. After several days of using WireShark capture traces, I was able to determine the entries were being dropped when an application on one of my four WinXP/SP3 systems sends a "DHCP Inform" packet to the router. The E3000 (and WRT54G V8.0) responds with correct IP Lease information but deletes the client's entry from it's DHCP Client Table in the process. My problem was supposedly referred to the support team in Irvine, CA about a week ago, after I discovered what was causing the table drop, but I have not heard from the Irvine team yet. I will follow up on Monday for a status update.
Oddly enough, the "triggering application" is MicroSoft's AutoUpdate process. Once I configured MS AutoUpdate from "Check but do not download updates" to "Turn Off Automatic Updates", the AutoUpdate process ceased generating "DHCP Inform" packets and my system has not been deleted from the router's DHCP Client Table since then. I have a total of four WinXP/SP3 systems behind the E3000, one is direct connected to an Ethernet port on the router and the other three are connected to the EG008W switch which is connected to a port on the E3000. One of those three systems is occasionally connected wirelessly to the E3000 for long periods with no connection problems. My NVidia nForce 730i tower is one of the systems on the EG008W switch and is the one that was being dropped from the DHCP Client Table (whether it was on the switch or direct connected to the E3000). The system that is always direct connected to the E3000 is an identical NVidia nForce 730i tower and has never been dropped from the DHCP Client Table.
Please note that the client that was being dropped from the router's DHCP Client Table did NOT lose access to the Internet. Repeated checks using Command Prompt "ipconfig /all" indicated the client still had it's IP Address lease. Issuing a "ipconfig /renew" command resulted in the client being shown in the router's DHCP Client Table until the next "DHCP Inform" packet was sent and responded to by the E3000 (and WRT54G) router.
Concerning switch connection issues with the E3000 and some newer WRT54G wireless routers, I had a similar issue in March 2011 with a LinkSys SD2005 Gb switch newly connected to a WRT54G V8 and later my new E3000 wireless routers. The SD2005 had no issues connecting to an older WRT54G V6 router. A call to the Support line transferred me to the Cisco Engineering support team which confirmed connection compatibility issues with older switches and new LinkSys Wireless routers due to firmware changes in switch connection support. I replaced my SD2005 with an EG008W Gb switch and have no problems with it on either the E3000 or the WRT54G V8 backup router.
Concerning the randomly assigned dynamic IP addresses from the E3000, from my perspective this appears to have started after the WRT54G V8.0 Wireless-G router firmware. Not only does the E3000 definitely prefer the upper 10 IP addresses of the dynamic range but it ignores a client's request to renew a previously assigned IP address during the client's "half-life" IP Lease renewal process and usually assigns a different IP address. This may part of undocumented identity protection policies. I have chosen to use the E3000's DHCP Reservation function for my home based systems, both wired and wireless. I do not use the DHCP reservation function for the new E3000 "Guest" wireless network. Please note my use of DHCP reservation went into effect about halfway through my DHCP Client Table diagnosis process and had no affect on the issue except that I had reliable client IP addresses to use in ShareWare capture filters.
I apologize for the long dissertation, but after 40+ years in various mainframe/open-system positions, I have a well known penchant for documenting problems for future reference. -
D-Link DI-524: installation as wireless HUB/Bridge
General
ON ALL TYPES OF ROUTERS DHCP SERVER HAS TO BE DISABLED
ON ALL TYPES OF ROUTERS UPnP ALSO HAS TO BE DISABLED
OTHERWISE YOU CAN SEVERELY HINDER OTHER USERS IN YOUR NEIGHBOURHOOD!
Practical example: D-Link DI-524
The DI-524 is a wireless router.Although the manufacturer doesn't mention this, you can also install this device as a wireless hub.Of course this is not supported by the manufacturer. Therefor you have nowhere to go in case of any problems Plug in the power cord of the DI-524. Do not yet connect the network cable!Search for existing wireless networks with your computer. Connect with the router.This can for example be done like this:
Click the start-button (at the bottom in the left corner of your screen).
Go to control panel
Go to internet connections (you may have to choose classic representation first)
You can now see your wireless network card, among other things. Right-click and 'View available Wireless networks'.
Connect to the router. In most cases the router will be called 'default'.Check your IP-address: you get an IP address from the DI-524
Go to the start-button
Go to 'Run'
Type 'cmd' and press enter
type 'ipconfig' and press enter
your IP address starts with 192.
Surf to your router with your regular browser. For this you need the address and a password, which you can find in the documentation.
In this case the address is 192.168.0.1
Now you must secure the router. For this it is best to use WPA-PSK
Your key is a randomly chosen sentence. Don't make this sentence too short.
Warning: Case sensitive!
You cannot reach the router anymore now.
Go back to your network card via "make connection". Search for your wireless network again and make a new connection
You are asked for a key. Supply this key the way you configured it in your router.
Surf back to the router.
Disable the DHCP server.
!! YOU HAVE TO DISABLE UPnP ON ALL TYPES OF ROUTERS
OTHERWISE YOU CAN SEVERELY HINDER OTHER USERS IN YOUR NEIGHBOURHOOD!
for this, go to Tools, Misc and switch off UPnP
Save these settings.
If you do not have a D-link router, look up in the manual or somewhere else where you can disable UPnP
Now you cannot reach the router anymore again.
It is only from this moment that you can connect the router to the modem.
Important: Use one of the 4 LAN ports. Never use the WAN port!
Go to your network card via the control panel. Right-click and "Repair"
Now you should get an IP-address in the range of 10.nnn.nnn.nnn
If you still don't have 192... you've made an error. The DI-524 still functions as a router and this is not allowed!There are no Mac based instructions. The router is accessed and adjusted the same way whether you are using a Mac OS X, Windows or Linux. As noted in the other post it is done through your web browser which works the same from any computer. Even a Chrome Book.
akertrav wrote:
Thank you for that what I have been trying to do is extend the range of my wifi witha second dilink router. I was hoping for some mac based directions to achive this rather than the PC based as presented. Thank you for your ireply Paul -
How do I find where my DHCP server is on my network?
I have a home network, a BT server, with an iMac, a MACBook Pro, two back-ups (Airports) and a Squeezebox (for internet radio). The problem is that the Squeezebox keeps dropping out and informing me that it cannot find the DHCP server. This did not used to be a problem, has happened failry recently, for no obvious reason. Any help is much appreciated.
start
system information
click network
click Wi-FI or ethernet depending how you get your network on the mac
scroll to the DHCP Server responses:
look under it's Server Identifier -
Does anyone know how the internal DHCP server in these access points connects to virtual interfaces and bridges in the unit?
Is there some sort of default connection that connects the DHCP server to the native bridge group or VLAN?
In a test case, with an SSID in the native VLAN and bridge group, the 1702i serves an IP address to a wireless client no problem. But with a second SSID in a non native VLAN and bridge group, no IP gets served. My only guess is that since the bvi1 defaults to the native bridge group and VLAN, sub-interfaces also in this group are assumed to be in the same subnet as bvi1, or in this case:
interface bvi1
ip address 192.168.1.205 255.255.255.0
no ip route-cache
exit
It would be the ..1. subnet.
Since the dhcp pool is set as:
ip dhcp pool GeneralWiFi
network 192.168.1.0 255.255.255.0
lease 1
default-router 192.168.1.1
dns-server 8.8.8.8
exit
There may be an assumption that anything bvi1 can talk to is in the ..1. subnet, so the above pool gets activated on a request coming through bvi1.
Is the DHCP server just hanging out waiting for a request from an "area" that is assumed to be on the same subnet as the given pool?
Do I need to somehow show the device what subnet the 2nd SSID/ subinterfaces are in so the internal DHCP server can decide it needs to go to work, or is there some sort of bridging between the DHCP server and the interfaces that needs to be done? I am trying to use the same DHCP pool for the second subnet at this point, since I assume I will need another router to service an additional subnet and DHCP pool.Keep in mind that DHCP is a broadcast packet to start. So the AP can only listen in the subnet that it has an IP address for.
Now, for any other subnet you can use the AP for DHCP but you have to have an IP helper address on your L3 pointing back to the AP.
That being said, I wouldn't use the DHCP server on the AP as it is limited. You'd be better off using a Microsoft server or some other device that is designed for DHCP.
HTH,
Steve -
DHCP Setup across multiple VLANs on RV325 - DHCP Server only working on VLAN 1
I have multiple VLAN subnets defined on my RV325 - when I try and utilize a DHCP Server on each VLAN, it only seems to be issuing IP Addresses to clients on VLAN ID 1. When I first set this up months ago, I thought I had tested it providing IP Addresses via the other subnets. Now that I am trying to do so, it isn't working "as expected". Example - I am using VLAN 25 as the GuestWireless subnet utilizing a separate 802.11n WAP that is set to Bridge connections to the IP Address of the VLAN interface. Devices are able to connect to the WAP, but end up with a self-assigned IP Address 169.x.x.x address. There has to be an easy fix to this, but I seem to be "stuck" figuring out what it is…pointers/redirects appreciated. Thanks!
Thanks - I've already reviewed that information before I posted. I've been working with DHCP since the mid-90's, so I'm comfortable with the settings/configuration I need to leverage to make this work via other means using various Network-based OSes.
I'm wondering if there are other options in configuring this device that can impact the ability to dynamically serve IP addresses on a VLAN/subnet-by-VLAN/subnet basis.
As I did more testing, I discovered when I reserved an IP Address via the IP & MAC Binding option within the DHCP Settings, those devices would receive their static reservations and work as expected, so the problem seems to be leveraging the DHCP Pool for devices connecting to VLANs other that VLAN 1.
Any ideas as to why the DHCP Pool's are "non-functioning" for the other VLANs is greatly appreciated...
Each VLAN is setup with a separate DHCP Server configuration as shown below:
VLAN ID = 1 (Default, Inter VLAN Routing = Enabled, LAN1-6 = Untagged, LAN7=Tagged, LAN8=Excluded, LAN9-14 Untagged)
Device IP Address = 172.16.xxx.1
Subnet Mask = 255.255.255.0
DHCP Mode = DHCP Server
Remote DHCP Server = 0.0.0.0
Client Lease Time = 1440 min
Range Start = 172.16.xxx.100
Range End = 172.16.xxx.199
DNS Server = Use DNS as Below
Static DNS 1 = 208.67.222.222
Static DNS 2 = 208.67.220.220
WINS Server = 0.0.0.0
Correctly serving IP Addresses via DHCP (both static and dynamic) to Wired devices & Wireless devices connecting through WAP (set to Bridge)
VLAN ID = 25 (GuestWireless, Inter VLAN Routing = Disabled, LAN1-LAN7 = Excluded, LAN8 = Untagged, LAN9-14 = Excluded)
Device IP Address = 172.16.yyy.1
Subnet Mask = 255.255.255.0
DHCP Mode = DHCP Server
Remote DHCP Server = 0.0.0.0
Client Lease Time = 1440 min
Range Start = 172.16.yyy.100
Range End = 172.16.yyy.199
DNS Server = Use DNS as Below
Static DNS 1 = 208.67.222.222
Static DNS 2 = 208.67.220.220
WINS Server = 0.0.0.0
NOT serving dynamic IP Addresses via DHCP to Wired devices & Wireless devices connecting through WAP (set to Bridge)
Static DHCP Reservations setup via IP & MAC Binding settings DO WORK in terms of providing the assigned static IP Address to the client. Inbound/Outbound traffic to Internet works for devices with Static DHCP Reservations.
VLAN ID = 100 (Voice, Inter VLAN Routing = Disabled, LAN1-6 Excluded, LAN7 = Untagged, LAN8-14 = Excluded)
Device IP Address = 192.168.zzz.1
Subnet Mask = 255.255.255.0
DHCP Mode = DHCP Server
Remote DHCP Server = 0.0.0.0
Client Lease Time = 1440 min
Range Start = 192.168.zzz.100
Range End = 192.168.zzz.199
DNS Server = Use DNS as Below
Static DNS 1 = 208.67.222.222
Static DNS 2 = 208.67.220.220
WINS Server = 0.0.0.0
NOT serving dynamic IP Addresses via DHCP to Wired devices & Wireless devices connecting through WAP set to Bridge
Static DHCP Reservations setup via IP & MAC Binding settings DO WORK in terms of providing the assigned static IP Address to the client. Inbound/Outbound traffic to Internet works for devices with Static DHCP Reservations.
Maybe you are looking for
-
Connection Timeout after updating to 10.6.6
Dear Friends I've got Macbook Pro mid 2010, when I was on 10.6.5 there was no problem connecting to Wi-Fi but after the magic update, I always got "Connection Timeout". another thing to add, I can connect to any network via windows 7 I installed on m
-
I have both quickoffice and pages on my iPad, and when I try to print from either of those through EpsoniPrint they don't print "normal". And pages prints with a border around it. How can I adjust that or is there a better app for printing via wire
-
How can i author a DVD with multiple timelines so that "previous chapter" actually works?
I am trying to burn a DVD with multiple short films. i used a timeline for each film and a playlist for the "play all" button that includes all timelines. Problem is when you press previous chapter it only takes you to the beginning of the current fi
-
Are queries thread-safe? (read on)
I have a singleton class in a multithreaded environment. This singleton has a single private instance for each database query being used. For parameterized queries, the argument vector is passed into the session.executeQuery() call when a thread exec
-
Hi All I am modifying standard smartform. I am facing problem in fetching data from "Form Interface". For Eg. Status type output_status but here "output_status" is Table Type of some Structure(from where I want to fetch the field).