Impact of wrong DNS in DHCP scope for CCM

We recently deployed some phones at a new site  which were displaying error messages on the screen
The initial issue was that Option 150 as not set up - resolved-
Phone now seemed to register to CCM (8.6) - IP address located to phone but CCM was showing rejected on the phone page
Phone displayed error  messages "Db config." and "Security"
Db Config looked like it was that no phone was configured/MAC address, phone type etc  - incorrect double checked all ok
Other could be replication between Cluster but again all ok
Security error - Led me to look at the security trust list and delete it and as normally this solves the problem
The actual issue/resolution was incorrect DNS name in the Option 15 of the scope - e.g xxxx.net instead of xxx.com
Why would this lead to the above issues, I thought the main requirement was the 150 for the TFTP
Any thoughts, answers
Many thanks

The issue was that there was an incorrect DNS option 15 given out e.g mycompany.com instead of the correct one of mycompany.com, Option 150 was an IP as normal
I think the issue was as follows
Our CCM`s have host names such XXX-CMSUB1, XXX-CMSUB2 etc instead of IP address- before I joined. If my thinking is correct the phone received its TFTP as normal and was provided with the CM Group but in our case the group contained Host names instead of IP address. The Host names were then added to the Option 15 DNS and so the phones tried to look for CCM`s at XXX-CMSUB1.mycompnaya.net and XXX-CMSUB2.mycompanya.net which failed since DNS has the CCM`s as XXX-CMSUB1.mycompnaya.com and XXX-CMSUB2.mycompanya.com
Does this make sense , if so why the Security and db config issue unless these are standard error messages?

Similar Messages

Internal DHCP scope for AP on WLC 7.0 (on diff subnet)

hi All,
I would like to know if it is possible to assign dhcp pool on a different subnet to the WLC management interface?
Eg: Management Interface is on 172.16.4.100 /24
I would like to use the WLC Internal DHCP to assign IP to my APs on the a different range 172.16.2.x /24
Is that possible?
I have tried assigning dhcp scope for the AP within the same subnet as the management interface and it works. But that is not my requirement
Apparently i need my AP to be sitting on a different vlan
please advise

No its not possible.. this works only if the AP and the WLC management interface is in the same subnet!! to ur issue we use something called as DHCP OPTION 43, google search DHCP OPTION 43 + cisco, the first link that u get wil help you!!
Please dont forget to rate the usefull posts!!
Regards
Surendra

Best place to create the DHCP scope for Guest SSID for remote office connected to HQ Foreign-Anchor controller

Hi Experts ,
Need help with the respect to understand the best practice to place/create the DHCP scope for remote site Guest SSID which will be connected to HQ Foeign-Anchor controller set-up.
how about internet traffic for Guest SSID , which one will be recommanded :
1) Guest SSID gets authenticated from HQ ISE and exposed to the local internet
2) Guest SSID gets authenticated from HQ ISE and exposed to the HQ internet
Thanks

Hi George ,
Thanks for your reply ...So you mean, best design would be to create the DHCP scope into DMZ for guest and let it get exposed to HQ internet ...
how about if I have another anchor controller in lets say in other office and I need to anchor the traffic or load balance from HQ foreign controller , in that case if I create DHCP scope into HQ anchor controller and if its down , I will loose the connectivity , how do I achieve fail-over to another anchor ?
Do I need to create secondary scope into another anchor controller and let the client get reauthenticated from other location ISE and get ip address as well from another anchor controller . Is it what you are proposing ?

Create DHCP Scopes for VLANs

Hi
I have a Server 2008 R2 DHCP server with one scope for our 10.165.x.x range. We are going to introduce some VLANs on a 172.16.x.x range and want to create a DHCP scope for this on the same DHCP server as the 10.165.x.x range. If I create the scope now before
configuring the VLANs, will computers in the 10.165 range get a 172.16 address?
Thanks in advance
Shane

Hi
I have a Server 2008 R2 DHCP server with one scope for our 10.165.x.x range. We are going to introduce some VLANs on a 172.16.x.x range and want to create a DHCP scope for this on the same DHCP server as the 10.165.x.x range. If I create the scope now before
configuring the VLANs, will computers in the 10.165 range get a 172.16 address?
Thanks in advance
Shane
If you create a scope that has a different subnet than the interface on the DHCP server that's connected to the network, then no, it will not affect the current clients on the subnet.
To make it work for your VLAN, in the switch, you must create a DHCP Relay Agent or IP Helper. That's what makes it work to the VLAN subnet. To create the Relay Agent/IP Helper, consult your switch documentation.
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.

Recommended DNS zone replication scope for single domain environment

Hi, in my company we have domain/forest functional level Windows Server 2008 R2 - there is only one domain. AD DS is installed on 5 servers -
AD integrated DNS zone is used.
I noticed today that on both forward lookup DNS zones, _msdcs.internaldomain.com
& internaldomain.com, zone replication scope was set to
All DNS servers in this domain and also for one reverse lookup zone. I changed this setting for all these zones to
All domain controllers in this domain but later (10-15 mins at most) I reverted these settings back to
All DNS servers in this domain.
Which zone replication scope for mentioned zones is recommended keeping in mind this is single domain environment? Also could I do any harm to DNS and AD in all when I changed zone replication scope and later reverting it back for these zones? How to check
that dns related informations (zones) are located where they should be in Active Directory and that there is no any garbage in other locations (partitions) in AD database.

Hi,
All DNS servers in this domain : Replicates zone data to all Windows Server 2003 and Windows Server 2008 domain controllers running the DNS Server service in the Active Directory domain. This option replicates zone data
to the DomainDNSZone partition. It is the default setting for DNS zone replication in Windows Server 2003 and Windows Server 2008.
http://technet.microsoft.com/en-us/library/cc772101.aspx
Hope this helps.
Regards.
If you have any feedback on our support, please click
here
Vivian Wang

How DHCP scope will work between two Wireless contoller

Dear All,
I would like to inform you that we are going to deploy Wireless Network with redundancy of Wireless LAN Controller and we need to figure out how DHCP scope would work during fail over any one of Wireless LAN controller and DHCP Server .I have two site where Two Differenet DHCP Server would be palced with different DHCP socpe.So My query is that if Site-A(according to attached diagram) DHCP Server and controller fails how Wireless client will take the DHCP scope from Site-B(according to attached diagram) DHCP Server as it has been configured different DHCP Scope.Can any one tell me whether i can configure same DHCP Scope at Both Site's DHCP Server.
Is there any way to configure same DHCP Scope for two sites.For your infromation client wants two Different DHCP Server with different scope for Two Site and how redundancy would be ensured if any one WLC or DHCP goes down.
I am eagerly waiting for your reply as early as possible.Please help to figure out the solution.
I am going to attached Sample Design for your reference.
Thanks and regards
Erfan

Erfan:
My query was that if one wireless client already associated
WLC-A with one IP block of Location-A (DHCP Server) using SSID named TEST. If DHCP-A or WLC-A goes down then how that same client would associate with WLC-B and get the IP Block from Location-B (DHCP Server) using same SSID name TEST.
In this case the clinets connected to the APs in location A will disconnect (if the WLC went down) and they have to connect again when the APs join WLC-B. They will get IP address from location B block then.
If DHCP went down when new clinets try to connect the primary DHCP is down so they are referred to the secondary DHCP. connected clinets will disconnect only when their DHCP lease times out. They will try to renew but the DHCP server is not available. They will disconnect then and connect again and getting IP from B site.
1. How we will create same policy for that two different block using same SSID.
what policy? where?..etc?
2. client would be connected with Access point but they will get the IP through VLAN interface of the Controller and we have to assign IP helper address in the interface vlan.So how the the client would get the IP block if we assign two IP helper address in the interface vlan in case of failure of DHCP and WLC of one location.
3. If we assign two IP helper address then which DHCP Server will release the IP for client and we can make delay between two DHCP Server to release the IP address.
If two IP helpers are configured the switch will send them both the client's request and they client receives two offers. The clients chooses one of the offers. Usually the clinet will accept the faster DHCP server to respond.
If you are using the DHCP on the WLC then it is different. The WLC will always try to reach the primary DHCP server as long as it is reachable. If the primary DHCP is not reachable then it falls back to the secondary DHCP server.
Note that when you use IP helper then you usually disable DHCP Proxy feature on the controller. Do you have it disabled?

DHCP scope in WLC.

hi all,
please any one confirm ,is it possible to configure the DHCP scope for APs in WLC ?
i am having 5508 controller connected to L3 switch..if it is possible what need to be done for that.
thanks in advance.
venkat

Hi Venkat,
WLC can lease IPs to APs only if we configure the pool in the same subnet as that of management interface.. having said that, its no possible to assign diff pool for AP which resides in diff subnet on the WLC.. We need to go for either Pool on the Layer 3 device or DHCP server.
IP MAC binding is already enabled on the WLC by default.. AFAIK, this is more usefull for PASSIVE clients rather to active
Lemme know if this answered ur question and please dont forget to rate the usefull posts
Regards
Surendra

DHCP Superscope for Server 2008 R2 Standard

I am running out of IP Addresses in my network, and would like to create a superscope to resolve this issue.
I know the basic steps after reading Article ID: 255999 :
Add secondary IP addresses to the current router interfaces.
Create a new DHCP scope for the new logical subnet.
Create a superscope and add the old and new DHCP scopes as children.
i have a couple questions about this :
1. since we have switches can i apply the IP Addreses to the VLAN of the switch? I know that the VLANS support more than one IP ADdress
2. I have a second scope on the DHCP Server already for our IP Phones - how would this be handeld? Should i import this into the superscope or just leave it alone as is?
thanks in advance,
vramch

Eve, thank you for the reply that article was most informative. I supposed i should have said that currently our network has only two VLANS - one for DATA and one for VOICE.
I was thinking of adding a second IP for the DATA VLAN, and using that IP as the gateway of the second scope.
Current Setup :
Subnet - 10.10.10.0/24
DATA VLAN : 10.10.10.4
GW : 10.10.10.1 255.255.255.0
DHCP Server : 10.10.10.15 - assigns 10.10.10.50-10.10.10.254 GW 10.10.10.1
what i was thinking of doing was adding a second scope :
New SCOPE : 10.10.88.0 / 22
adding the secondary IP to DATA VLAN 10.10.88.4 255.255.252.0
DHCP Server 10.10.88.15 255.255.252.0 (added second IP to existing DHCP Server 10.10.10.15) create a superscope with the existing DHCP Scope and a new scope which would then assign 10.10.88.50 - 10.10.91.254 255.255.252.0 & GW 10.10.88.4.
i just realized my switches are layer two - this may not work then?
Patrick - i wish it would have been that easy, but the subnet's above and below the existing one are in use on other networks, so i simply can't expand the range that easily. I have to go well out of the subnet range for a free block of IP's
thank you both for the suggestions and assistance.
vramch

Server 2008 DHCP is handing out the wrong DNS server.

We have two new 2008 DC that handles, DNS, DHCP and WINS. Our DHCP scopes have been migrated to these servers. We are seeing some random issues where clients are using the new dhcp server but the old dns server information is listed for the some systems. We discover this by using network monitor on the old DC, DNS, DHCP server. Once the client performs a ipconfig /renew, the problem is corrected. Any ideas?

Hi BrianAuH20,
Thank you for posting here.
Based on your description, I understand that your Windows 2008 DHCP server hands out the wrong DNS server address.
To troubleshoot this issue, please perform the follow steps to see whether the clients retrieve the right DNS server address.
1.     Temporarily make the old DC, DNS, DHCP server offline.
2.     Check the new 2008 DHCP server setting.
                      i.        In the DHCP console tree, under Scope [172.16.0.0] SS Scope, right-click Scope Options, and then click Configure Options.
                     ii.        On the Advanced tab, verify that Default User Class is selected next to User class.
                    iii.        Select the 006 DNS Servers check box, in IP Address, under Data entry, type DNS Server IP address, and then click Add.
                    iv.        Select the 015 DNS Domain Name check box, in String value, under Data entry, type your domain's FQDN name, and then click OK.
3.     Restart the DHCP service.
For more information, you may refer to:
http://technet.microsoft.com/en-us/library/ee404786(WS.10).aspx
Hope this helps.
Sincerely,
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.

Unusual DNS/DHCP requirement for 2012 Essentials at home.

I have a Windows 2012 Essentials server acting as DNS and DHCP server with a domain providing backups etc. for my home network. This is all working fine, no errors, no problems. Works well in fact, telling me when the kids haven't installed updates
or rebooted.
I have two groups of users. My step sons, 10 and 12, who I want to use OpenDNS as an external DNS provider with a very, very restricted policy, and my wife and I who want to use either root hints or Google DNS or any other DNS provider. Other, non-user
specific devices (xBox, WII, Satellite box, TV, CCTV etc.) can use either.
Prior to having the 2012 server, I had a 2k3 server running in a VM for DHCP, only and put my wife and my devices onto static reservations with the external DNS provider and just used OpenDNS as the default scope DNS. Unfortunately various bits
of the 2012 domain services don't appear to work unless the 2012 server is the first DNS server listed on the client devices (Backups fail. Can't find other local computers). This means currently we are all using OpenDNS.
What I would like is some way to tell 2012 to send DNS requests from the grown-ups group to a different DNS provider and leave the rest to default to OpenDNS whilst still having them register themselves in the home DNS domain. Any suggestions?

Hi,
According to your description, my understanding is that you want to specify DNS server to different user groups and devices. And all of the home devices registry their DNS record on your internal DNS server.
I am not sure about the IP address configuration of your home network. Windows Server 2012 is the only device directly connect to Internet, and all of the devices on home network are on a private network?
If it is the case, WS 2012 also works as the gateway of your home network, all of the network traffic(external) should go throw the WS 2012. Windows DNS Server can’t specify different external DNS server based on users/groups. In order to implement the function
you required, it is necessary to add another DNS server(which connects to the Internet). One of the DNS servers is configured to use root hints or forwarders(Google or any other DNS provider). Other DNS server is configured to use forwarder(OpenDNS). Then
using DHCP server to specify DNS servers to different devices.
Best Regards,
Eve Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Multiple Lease Duration for one DHCP Scope?

Hi All,
I have an urgent question. I wanted to know if it is possible to have many lease durations for different computer groups getting their addresses from one DHCP scope. I saw somewhere that it is possible to use User Classs or Vendor Classes for setting a lease
duration for a group of computers sharing the same class Id ?
If it is true, How can to configure ?
Also i would like to know about the lease duration period what is the maximum days can we have ( 8 days After )?
Thanks
Atul

Please refer to the following-
http://social.technet.microsoft.com/Forums/windowsserver/en-US/26de79f9-6ad7-4088-9077-006b9dd8c1fb/multiple-lease-durations-for-one-dhcp-scope?forum=winserveripamdhcpdns
You can configure any value as lease duration; however if you want a very big/infinite value; it makes sense to convert the lease(s) to a reservation.

Is there a way for internal DHCP Scope to release scope addresses when the wifi client has disconnected?

DHCP scope is configured on a WLC 5508.
I'm checking if there' a way for WLC to clear the dhcp leasing when a user is diconnected from wireless?

Unless the client sends a DHCP Release upon disconnect, which is not mandaded in the protocol, the lease will simply remain until it has expired. If you're concerned with running out of leases, you only have 2 options.
1. reduce the lease time of your dhcp scope
2. increase the network size to accomodate more usable addresses.
There isn't a way to force a DHCP address lease to be "cleared" from the WLC simply because the client was disconnected.

DHCP scope only for WiFi

Hi. Is it possible to configure some DHCP scope on Windows Server 2012 R2
only for WiFi devices?
Maybe some policy?
Thank you!

Hi,
Base on my experience, in the enterprise environment, we usually create a private vlan for the wireless terminal.
Therefore you can create a dedicated scope for the wireless terminal device.
More information:
What's New in DHCP in Windows Server 2012 R2
http://technet.microsoft.com/en-us/library/dn305900.aspx
Configuring a DHCP Superscope
http://technet.microsoft.com/en-us/library/dd759168.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Why does my airport give wrong default gateway dhcp?

I have a fancy AirPort Extreme Base Station running 7.7.3.
It was recommended as a very good wireless access point, which it is, purely in terms of signal strength and connectivity.
In terms of easy configuration, this thing is a nightmare. Someone once told me, "Get Apple products, they just WORK!" Not in this case. I am using the base station to provide access on my home network wirelessly and wired on the same layer 2. DHCP is assigning 192.168.1.250 as the default gateway, but the IP of the base station is 192.168.1.1, so none of my hosts on DHCP are able to get Internet. I cannot find or see a way to correct the DHCP gateway assignment.
In addition, I have a single wired Windows host. It does not get the DHCP reservation I set up for it. I cannot for the life of me figure out why. MAC is right. ipconfig /release and /renew fails to assign the correct address every time tho.
I have one Mac in the house. It too fails to obtain the right gateway IP. My question: why is the base station assigning 192.168.1.250 as a gateway when it's own internal IP is 192.168.1.1????
I have owned many home access points. This is the first one I couldn't assign the internal IP to as a gateway address, and I can't assign a specific subnet mask to pair down the broadcast domain. Why are the options to configure my internal network so limited?

LaPastenague wrote:
Why are the options to configure my internal network so limited?
So it will be easy to configure.
Sadly this means there is no way to fix things when they go wrong.
How did you manage to get 192.168.1.x .. as the default IP of the TC is 10.0.1.1 and it is well worth leaving it alone.
Post a few screenshots and we can help you fix it up. Mostly.. probably.
So the default is 10.0.1.1, but I didn't want an entire class A range wide open on my home network, so I chose the class C 192.168.X.X (why is Apple still doing classful networks?!?)
Here's some helpful screenshots, starting with the opening screen.... note the router's IP:
This is my AirPort's basic info, and the networks. There are two ethernet ports in back, one connected to the cable modem, the other to BADGER, my PC. BADGER will be the example in all my DHCP woes...:
This is BADGER's manually assigned IP info. I would like to set up a reservation for it on the AirPort so I can just switch it to DHCP and be done.
As you can see, my gateway is 192.168.1.1, which is the internal IP of the AirPort extreme. I use public DNS servers, so I add those manually on the PC. So, using this info, I create the reservation:
Here you can see the DHCP scope I've assigned: .1.2-.1.50. I also set up a reservation for BADGER. No where on here is a way to specify the router's internal IP, which is 192.168.1.1 - it's the only gateway address that works.There's also no way to apply a more restrictive subnet mask to limit the number of hosts on my internal side, but that's another issue. Moving on...
I apply the reservation. I click update. The AirPort extreme router updates itself. I switch BADGER to DHCP, and release/renew. Here's where it gets interesting:
Here's what the router wants to assign me. The MAC address is the same as in the reservation, but the AirPort Extreme gives me 192.168.1.129? That's not even in the range I defined. Also, note the gateway address. It wants to assign 192.168.1.250 ... but that's wrong, as indicated by the lack of network connectivity in the system tray. If I configure my PC to use 192.168.1.1, then traffic routes off my home network just fine because that's the internal IP of the AirPort Extreme. So, without getting into this product's shortcomings as an actual configurable home router:
- Why does it assign its gateway as 192.168.1.250 when it's really 192.168.1.1?
- Why does it ignore my DHCP reservation and assign a completely out-of-scope IP?
All of my devices are getting .250 as the gateway. Wireless and BADGER, even my lone Mac. Can anyone shed some light?

Pulling wrong DNS, id from server?

Hello -
I'm not sure if this is the correct place for the issue I am experiencing. I am unsure what to call the problem I am seeing so I hope to describe as best as possible and not make too much of a fool of myself with my poor computer terminology.
In the office, the people here have mostly Windows, I'd say they are 98% Windows XP and all Windows servers. I have a mini and my primary machine is a new MacBook. I had been using Synergy to use one keyboard and mouse with my macbook and the windows box I have to use.
For ease, let's say my Mac is named MacBook and my admin user is Jennifer.
Today having some problems starting synergy I went to check the Sharing pane and noticed that it says
"Other Macintosh users can access your computer at afp://xp-joesmoe.xxx.com/ or browse for "macbook" by choosing Network from the Go menu in the Finder."
Strange since my computer is not called xp-joesmoe anywhere!
Then I launch terminal to try to start synergy again and notice that the default terminal user (not sure what you call this) comes up as
Last login: Wed May 30 09:47:26 on ttyp1
Welcome to Darwin!
xp-joesmoe:~ jennifer$
The IT guy (at home today) said probably something with the bad way mac handles DNS and **** see if theres something we can change on my machine config tomorrow. I had numerous Macs at my last company on my network with all windows servers handling the DNS and didnt see this.
Is this some weird thing the server is doing? IS it something I can resolve locally? I have rebooted and renewed my DHCP Lease.
I also have a XP BootCamp partition installed, as well as parallels which uses the bootcamp partition (in case that in anyway effects this)
I hope I have provided enough information.
Thanks so much for any help!
Mac Kitten
MacBook, iBook G4, iMac G4, MacMini G4, PowerBook G4, Dell Vista Mac OS X (10.4.9) Current issue is on the MacBook, 2 GHz Intel, 1 GB 667 MHz, Built-in Ethernet, DHCP, BootCamp XP

> The IT guy (at home today) said probably something with the bad way mac handles DNS
Man, what a jerk.
There's nothing wrong with the way Mac handles DNS, but I guess that's not the point - blaming the Mac puts the problem in your court rather than his.
The problem (if it's a problem) is mostly cosmetic.
In the Windows network your admins are problably using Windows Server's DNS service (man, if you want to talk about BAD DNS...). It's likely that it's configured to support dynamic DNS such that it updates the DNS zone with hostnames for DHCP clients.
Normally, DHCP will assign each machine an IP address out of a pool. Since you can't predict what your IP address will be you can't configure DNS. However, in dynamic DNS, the DHCP server updates the zone files each time a host is connected - kind of like saying 'joe's machine is here today'.
The Mac isn't providing the information that the DHCP server needs in order to update the DNS, so the DNS server doesn't get notified when your machine connects. Therefore your DNS entry has the name of whoever last used the IP address you currently have assigned - in this case 'xp-joesmoe'.
Off hand I don't know specifically how the Windows client sends its name - I'm guessing via the DHCP Client ID, but I'm not certain - it might be via Active Directory. You can try setting a DHCP Client ID in System Preferences -> Network to see if it helps, alternatively ask the dor^H^H^H admin if you can have a static IP address for your Macs.
Finally, I say this is mostly cosmetic since it doesn't actually affect anything on your Mac at all, unless people are trying to get to your machine, in which case they can't do it via DNS. If your machine is running as a server, though, I'd move it to a static IP address anyway since running servers on a DHCP address is a PITA (I'm sure all those Windows servers have static addresses).

Impact of wrong DNS in DHCP scope for CCM

Similar Messages

Maybe you are looking for