Wireless Networks Thread, DHCP conflicts from somewhere in Technical; It appears that I have a second DCHP server dishing out IP addresses on my network. I think it must ...
28th September 2009, 09:47 AM #1
DHCP conflicts from somewhere
It appears that I have a second DCHP server dishing out IP addresses on my network. I think it must be a wireless router of some sort as the addresses I'm getting are in the 192.168.1.0/254 range.
Is there any way i can trace the offending object with software in as much as work out what switch it is connected to as a search of the school has not provided any such devices.
I know of one such router that we have that supplies the network admin staff with internet in order to bypass the filtering but this has been working quite happily for over a year now (and i've tried with it off and get the same results) and the problems have started in the past week.
Failing tracing the device is it possible to get my domain machines to only look for DHCP leases from one server?
28th September 2009, 09:49 AM #2
although i do know there is a technical around, but could you discount each sub switch from your master switch and see which one still gets DHCP?
What about "The Dude" or try logging into 192.168.1.1 or whatever gateway is giving and trying to disable it?
Thanks to p858snake from:
cromertech (28th September 2009)
28th September 2009, 10:11 AM #3
Find a machine that has got a 192.168.0.x address, and do an ipconfig /all. You should then have the address of the dhcp server (I'd bet 192.168.0.1 or 192.168.0.254) then open that address in a browser, It is most likely to give you a name of the device, which will help you find the culprit.
If you can log in to the AP/router or whatever, you'll be able turn off the dhcp service without leaving your seat.
Thanks to IrritableTech from:
cromertech (28th September 2009)
28th September 2009, 11:01 AM #4
Thanks. Got a scan going now in "the Dude". hopefully this will show something
@terrorvis. I tried to do that but got a web page not found error. I'm wondering whether it maybe a student running a DHCP server on a laptop just to p*** me off. Some of our kids are just too clever for their own good
28th September 2009, 11:05 AM #5
28th September 2009, 11:49 AM #6
I would suspect it is a rogue laptop especially as you cannot browse to it.
Good luck with it.
28th September 2009, 12:02 PM #7
I'd assume u haven't accidentally forgotten about any wireless access points that you may have installed somewhere. We did this once, wondered why bad crack was happening.
99% of the time it is a rogue AP dishing out ip addresses either because of a firmware issue or because it's incorrectly configured.
28th September 2009, 12:03 PM #8
since you can't access the webpage did you try going "\\IP\c$\"
also I seem to remember if you tracert a device that goes though multiple switches it will show you but i can't test that so I don't know if its just random idea or the truth"
28th September 2009, 12:05 PM #9
try "NBTSTAT -a 192.168.100.7" I don't remember if the -a has to be
upper or lower case, so try both.
28th September 2009, 12:24 PM #10
Originally Posted by bossman
-A IP address
2 Thanks to mattx:
bossman (28th September 2009), mac_shinobi (28th September 2009)
30th September 2009, 12:38 PM #11
A network protocol analyser, such as wireshark, will tell you where these are coming from.
Originally Posted by cromertech
By TechSupp in forum O/S Deployment
Last Post: 27th September 2009, 01:50 AM
By kevin_lane in forum Windows
Last Post: 24th September 2008, 09:39 AM
By AngryITGuy in forum Wireless Networks
Last Post: 23rd September 2008, 09:52 AM
By scottyses in forum Windows
Last Post: 7th February 2008, 03:02 PM
By wesleyw in forum Windows
Last Post: 7th July 2006, 08:45 AM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)