Solved

incorrect IPs and subnet being handed out but only sometimes

Posted on 2008-10-16
5
384 Views
Last Modified: 2012-05-05
This is a wierd one and keep in mind that it only happens on occasion. The setup is for a hotel and conference area.

Basic Setup:
Cisco 1841 router setup up as DHCP server to hand out IPs between 10.0.0.40 -254 (255.255.255.0 Subnet)
From Router ---> Dell 3048 switches to split to different rooms and Cisco 1121 APs.
The router, switches and AP's all have static IPs set in the 10.0.0.1-39 range

I have triple checked that all the APs are NOT setup as a DHCP servers and their "role in the network" are set as Access Points.
 
The issue is sometimes when guests (or even I) connect to an AP they are being assigned an IP of 10.0.0.19 (or ony one of the IPs below the routers DHCP scope) and a subnet of 255.255.255.224 !?!

Any ideas on where to begin troubleshooting this?
0
Comment
Question by:huntleyj
  • 3
  • 2
5 Comments
 
LVL 23

Expert Comment

by:that1guy15
ID: 22732415
Someone is connecting a router/access point to your network that has DHCP enabled. I would assume since this is a hotel a guest has a small home router that is configured with DHCP and when they connect it to your network it starts passing out IPs. They are most likley using it to get wireless access to a computer or access for multiple computers through one connection
0
 
LVL 3

Author Comment

by:huntleyj
ID: 22732516
Possible. Next few times it happens I'll look at the DCHP bindings on the router and record the MAC addresses and look for a common MAC Address. That's if it's the same guest.
0
 
LVL 23

Expert Comment

by:that1guy15
ID: 22732583
If it is always the same block of IPs then it could be an employee or a guest that stays frequently. Even though the 10.0.0.0 range is very common you would usually see the assigned ips all over the board.
0
 
LVL 3

Author Comment

by:huntleyj
ID: 22732636
What I might do is change the whole IP scope to something less common, say 10.113.0.x . A bit of a pain but if it fixes it it will be well worth it.
0
 
LVL 23

Accepted Solution

by:
that1guy15 earned 500 total points
ID: 22732842
You can do that but it will not stop rouge DHCP servers from passing out IPs. But you will know when someone gets the wrong ip because they will not be able to communicate with anything.
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
VoIP and Data on single switch, with SonicWall 6 52
Cisco Sup720 Migrate to Sup2T 5 55
Cisco iWAN 8 69
Port Forwarding on Cisco 881 14 30
We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now