?
Solved

Static IP address still issues DHCP Request - XP Pro

Posted on 2010-01-11
11
Medium Priority
?
981 Views
Last Modified: 2012-05-08
We recently received several new XP Pro machines  (Dell Optiplex) that we have added to our network (2003 AD and Linux).  We uses static IP addresses and all machines have been setup and appear to be functioning as expected.  Recently while troubleshooting another issue I was doing some network sniffing and saw that several machines were sending DHCP requests.  I have tracked it down to the new PCs.  It seems that the PCs that I have setup and assigned a static IP address do not send out the DHCP request, but the pcs that a coworker setup send out the requests even though they have been configured with a static IP.  We have compared network interface configurations and everything appears to be the same.  We have done the standard reboots, gpupdate /force etc and the pcs still send out 6 dhcp requests approximately every 10 minutes.
Any ideas what could be causing this?  The tcpdump output is attached.
11:21:42.601710 IP  0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:24:e8:xx:xx:xx

Open in new window

0
Comment
Question by:credog
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
  • 2
11 Comments
 
LVL 26

Accepted Solution

by:
Fred Marshall earned 750 total points
ID: 26285839
Yes.  I believe this happens when the "new" static IPs assigned are in conflict with other IPs already on the network.    At least I've seen this sort of behavior under those circumstances.  And, there were no warning messages that popped up.  It was a bit difficult to diagnose.
0
 
LVL 2

Expert Comment

by:Eric_Gennaoui
ID: 26285851

Did you tried to disable the DHCP client services on the XP machines ?
0
 

Author Comment

by:credog
ID: 26286017
fmarshall: I manage the IP addresses for the network, so I feel pretty confidant that I do not have an IP conflict.

Eric_Gennaoui:  I turned off the DHCP Client Service and the request is still being sent out.  The DHCP Client Service is running on all systems, the ones that don't send the request an the ones that so.

Thanks for both of the suggestions.
0
Plug and play, no additional software required!

The ATEN UE3310 USB3.1 Gen1 Extender Cable allows users to extend the distance between the computer and USB devices up to 10 m (33 ft). The UE3310 is a high-quality, cost-effective solution for professional environments such as hospitals, factories and business facilities.

 
LVL 2

Assisted Solution

by:Eric_Gennaoui
Eric_Gennaoui earned 750 total points
ID: 26286099

" I turned off the DHCP Client Service"  and  "The DHCP Client Service is running on all systems" are confusing me; is the service up or not.

Static IP machines should not have DHCP client service running, to prevent any issues; so if all your workstations are turned off (the ones that has static IPs).  and you are telling me that even turned off, they would still send DHCP requests, there might be some sort of software (rogue or not) doing it.
0
 
LVL 26

Expert Comment

by:Fred Marshall
ID: 26286289
I understand that you manage the IPs.  However, you also said:

"but the pcs that a coworker setup send out the requests even though they have been configured with a static IP."

And, I *have* seen this happen with the only thing needed was to get rid of the conflicting IP.  
So, I'd encourage you to make sure.  Even a typo could cause a well-managed system to do this.
0
 

Author Comment

by:credog
ID: 26287221
fmarshall:  Have checked once again and no duplicate IPs.  Have checked numerous ways and have even turned off one of the PCs.  Then ran ping and arping (Linux) and can not detect any dups.

Eric_Gennaoui: The service is up and does not seem to make a difference either way on the pcs sending dhcp requests.   Have tried to determine if some software app is sending the requests and it appears that there is nothing different on the PC sending and the PC not sending.
0
 

Author Comment

by:credog
ID: 26296176
I may have a solution to this issue.  On the PCs that were sending out the DHCP Requests I went into the TCP properties and told it to use DCHP and rebooted. When the PC came up a then reassigned the static IP address and rebooted once again.  THe DHCP Requests have stopped.  I'm not sure if this exact sequence of events is required, but so far it seems to have fixed this issue.
0
 
LVL 26

Expert Comment

by:Fred Marshall
ID: 26300998
Are you saying that you assigned manually the SAME IP that had been assigned by DHCP?  That would be very understandable.  Presumably DHCP is not in the same range as the static addresses you allow.  But then, this would break that self-imposed rule even as an expedient.

But, if you're saying that you assigned manaually the SAME STATIC IP that you'd tried before then that's not so understandable.  Then I might wonder if there's a rogue DHCP service running somewhere on the network.

Pinging won't guarantee that an IP is not in use.  At least one reason is because not all clients are set to respond to PING.  That depends on a variety of things including the PC's firewall, etc.  So, if it tells you that an IP is in use then that's great but it's not conclusive.
0
 

Author Comment

by:credog
ID: 26304620
What I'm saying is that the PC was originally setup with a static IP, but it still broadcast DHCP requests.  So, I told the PC to get a DHCP Address by selecting the radio button in the TCP/IP properties that states "Obtain an IP address automatically" and rebooted.  No DHCP address was obtained during the reboot since we have no DHCP server.  I then selected "Use the following IP address:" in the TCP/IP properties and set the IP to the same one the PC was using before.  Now no DHCP requests are coming from the PC.  Maybe by toggling the DHCP settings, it repaired a registry setting.  Hopefully that clears the confusion up on the steps that was taken.

I understand that pinging alone will not verify a pc is using an IP.  Other steps were taken including but not limited to using an arping from a Linux machine.  Arping does not use icmp request.  This is just another method of trying to see if a pc is alive and on the network.
0
 
LVL 26

Expert Comment

by:Fred Marshall
ID: 26305502
Toggling is often a good idea!  Glad you solved the problem.
0
 

Author Closing Comment

by:credog
ID: 31675644
Although the suggested solutions did not directly solve the issue, they helped greatly in the troubleshooting process.  Thanks for the suggestions.
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question