Solved

Master Browser 8003/Layer 3 Network/DHCP

Posted on 2006-10-26
12
680 Views
Last Modified: 2012-08-13
Since moving over to a layer 3 network, I am now seeing Event ID 8003 Master Browser errors in my event logs. This is happening because I have ip helper-address' on each vlan for dhcp. This is whats forwarding udp 137 and 138 to other segments

http://www.experts-exchange.com/Networking/Q_20927998.html?query=UDP+BROADCAST+FORWARDING+CISCO&clearTAFilter=true

I have a dhcp server on one vlan, which is also a domain controller. I have another domain controller on a different vlan. The rest of the vlans are printers and workstations only.  If I do a no ip forward-protocol udp 137 and 138 on each vlan, will this mess anything else up?
0
Comment
Question by:bluespringsit
12 Comments
 
LVL 31

Accepted Solution

by:
Gareth Gudger earned 250 total points
ID: 17816303
That will stop NetBIOS traffic and reduce broadcasts between the VPNs.

Is the server attached to all Vlans?
0
 

Author Comment

by:bluespringsit
ID: 17816339
but will i need netbios?
0
 
LVL 51

Assisted Solution

by:Keith Alabaster
Keith Alabaster earned 250 total points
ID: 17818778
Depends on what you mean by 'mess it up' and what are you are running for name resolution on your system.

As you seem to be aware, dhcp is a broadcast and broadcasts do not pass across subnet boundaries. The native concept is that there should be a dhcp for each subnet. Obviously, new technology and approaches have the concept of dhcp-relays etc to allow these types of traffic to pass these boundaries. IP helper addresses are one of these practices for dhcp and wins traffic.

If you have an entry in the DNS servers for every address, then Netbios is not necessary for Windows 2000 onwards, XP etc as they will look at the DNS rather than the old WINS system by default. However, if you are going to use DNS only, you will need entries for printers and such like as well as any other devices that do not use FQDN names by default.

I take it you do not have WINS services running?
0
 

Author Comment

by:bluespringsit
ID: 17819248
I do have both Wins and DNS running. All of the servers and wkstns have dns entries. I do not have the printers in dns or wins. Will I really need dns entries for the printers if I take down wins and block netbios broadcasts?
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Author Comment

by:bluespringsit
ID: 17819258
Diggisaur-To answer your question, the dhcp server is on one vlan. It is also a DC. There is another DC on another vlan, but it is not a dhcp server.  
0
 
LVL 21

Expert Comment

by:mcsween
ID: 17821387
Wait...it looks like VLAN and Subnet are being used interchangably here.  VLAN and Subnet are not the same thing.

Did you have a problem before with too much broadcast traffic?  Is this why you migrated to VLANs?



0
 

Author Comment

by:bluespringsit
ID: 17821766
I appologize. Same subnet accross the network. Different vlans for the different buildings, then further segmented to servers,wkstns,printers,ect.

The migration to vlans was done in preperation for a future wireless network, for organization and to create seperate broadcast domains to minimize traffic.
0
 

Author Comment

by:bluespringsit
ID: 17821776
Also, I shut down Wins on both servers yesterday-everything seems to be running smooth on dns only. (all 2k and xp network)
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 17824543
Well from memory does the browser elections and challenges all occur via broadcasts? Maybe the workstation don't see the server as a master browser because the broadcasts don't reach it, so they elect themselves the roll of master browser on each VLAN.  Maybe, I'm off here.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Downtime reduced, data recovered by utilizing an Experts Exchange Business Account Challenge The United States Marine Corps employs more than 200,000 active-duty Marines with operations in four continents, all requiring complex networking system…
This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now