Solved

How avoid situation of IP address conflict?

Posted on 2004-04-26
4
18,166 Views
Last Modified: 2013-12-14
I have wireless network.User are connected using avaya wireless routers and APs.
First computer ( W2000 server) runs ISA server and act as internet gateway. It uses one public IP address and his local network IP address is 192.168.0.1 (255.255.255.0)
Second computer (W2000 adv server) is domain controler and DHCP server. IP address of this computer is 192.168.0.2
DHCP server gives users addresses from 192.168.0.100 throu 192.168.0.254.
Problems occur when some user enter manually IP address of one of my servers or ip address of some other user.
How disable user to make situation like this or how to disable user to see other computers in network neigborhood. It is enough user can authenticate on my domain controler, and get connection on internet using my ISA server.

Thanks!
0
Comment
Question by:cutuk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 

Expert Comment

by:mikeachilles
ID: 10987927
Hi cutuk.

You should be able to manage this problem by controlling the type of account users have on their computer.  A non administrator or power user should not be able to statically configure their IP address.  Are you also asking how to disable users from viewing the network neighborhood?
0
 
LVL 36

Expert Comment

by:grblades
ID: 11005525
Could you please reword the following question as I can't follow exactly what you mean
"How disable user to make situation like this or how to disable user to see other computers in network neigborhood. It is enough user can authenticate on my domain controler, and get connection on internet using my ISA server."

So the windows DHCP server will issue an IP lease even if that IP address has been statically configured on a machine by mistake.
This is probably not what you want to hear but I would use the standard 'dhcpd' in Linux as it will attempt to ping the IP address to make sure it is not in use before issuing the lease.

As you have an ISA server you should be using WEB encryption on the wireless lings to stop anyone from being able to sit outside your office and browse the internet using your bandwidth.
0
 

Author Comment

by:cutuk
ID: 11007926
Hi mikeachilles, grblades
Sorry I was unable to answer yesterday.
Also, sorry I was not enough specific.
I have two computers at my office, and broadband interent connection. One of computers runs MS ISA server ie. internet proxy server, and gives me ability to share internet connection with other users. Second computer is domain controler. It is also a DHCP server. Beside this, I have a wireless infrastructure wich consists of four wireless access points connected using AVAYA COR,ROR bridges/routers. My clients are independent of my network, they have their own administrators and their computers runs W95, W98, XP etc.
In other words, you can see, it is a small internet service provider, who gives service for 50 clients.

When client enters as network card IP address, IP addres of the MS ISA server I noticed two things can happen:
1. MS ISA server notifie me that IP address conflict occured, and the client  losts connection.
2. Second situations is when the MS ISA server become unreachable, and no one of my clients have internet conection.

I want to know what I have to do to make my computers safe from situation described in second case.
I hope you can see now what I wanted to ask. Please sorry for my english.
Thanks!
0
 
LVL 36

Accepted Solution

by:
grblades earned 500 total points
ID: 11008378
The problem sounds like some machines are being configured with the same IP address as your ISA server. I assume your ISA server connects to the internet on one interface and there is another interface which connects to your local network?

What I would do is connect a router between the ISA server and the wireless access points. You can get the router to be the DHCP server aswell. That way all clients have an IP address on a different network and if they do configure one with the same IP as the ISA server the packets wont get past the router.

What speed internet connection do you have?
What else is the domain controler used for currently other than DHCP?
Is it used by any of the clients over wireless?
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Cable Modem Provisioning from DPoE compliant server  This Article is to support CMTS administrators to provide an overview of DOCSIS compliance configuration file, and to provision a cable modem located at customer place from a Back office serve…
Sometimes you have to pull out old tricks to get a new firewall to work… While we were installing a new Sonicwall at a customers site we found that sites they were able to visit before were not working.  It seemed random and we could not understa…
This is a high-level webinar that covers the history of enterprise open source database use. It addresses both the advantages companies see in using open source database technologies, as well as the fears and reservations they might have. In this…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question