plamski
asked on
Getting slammed with BAD_ADDRESS in DHCP
Hello,
This morning I got a complain that a computer is not connecting to the network at one of my sites. Wghe I went there I realized that the PC cannot get IP address. When I went to the local DC and checked the DHCP I saw a lot of BAD_ADDRESS records with strange MAC address: They were something like 4850006a, 4860006a, 4870006a, etc. and they were like 50 or more of them. I was checking the other DCs and everything looks fine. I have not changed anything on the DCs, just start happening.
I have 4 2008 DCs on three sites and they are in the same forest. Let me know if you need more info.
Please help.
Thank you,
Plamen
This morning I got a complain that a computer is not connecting to the network at one of my sites. Wghe I went there I realized that the PC cannot get IP address. When I went to the local DC and checked the DHCP I saw a lot of BAD_ADDRESS records with strange MAC address: They were something like 4850006a, 4860006a, 4870006a, etc. and they were like 50 or more of them. I was checking the other DCs and everything looks fine. I have not changed anything on the DCs, just start happening.
I have 4 2008 DCs on three sites and they are in the same forest. Let me know if you need more info.
Please help.
Thank you,
Plamen
I think MAC addresses starting in 48 are epson. Do you have some networked Epson printers or scanners?
ASKER
I think you should update the BIOS and Ethernet driver on that PC.
ASKER
Do you mean on the server? The server I have the DHCP has DNS and ACtive Directory running.
It's only one PC that can't connect, right? I think that PC is generating the bad DHCP requests; update the PC.
You could look in %windir%\System32\Dhcp on the server, maybe get the real MAC address and confirm that it's only one PC generating the bad requests.
You could look in %windir%\System32\Dhcp on the server, maybe get the real MAC address and confirm that it's only one PC generating the bad requests.
ASKER
They are acctually a few. And how this can happened on them at the same time?
DhcpSrvLog-Mon.log
DhcpSrvLog-Mon.log
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I have Dell PCs but they are running Windows 7 and they are the only ones don't have problems. My XP machines are HP dx2200 and d220. The weird thing is that I removed the DHCP role from the server and even that I am putting static IP on the XP machine - NO LUCK - still tells me that there is duplicte IP on the network andI know that there is not.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I found the problem. It came from the Juniper router attached to the network. It was running 8.1 software on j2300 but is was becoming unaccessible. From juniper recommended to upgrade to higher version and after they did to v8.5 yesterday morning, one hour later I start seeing these problems. Downgraded to the previous version and everything is up and running. "Laser Spot", it was a good clue about the Dell motherboards and the BIOS, because Juniper use dell manufactured servers.
Thank you both for your support,
Plamen
Thank you both for your support,
Plamen
the bad address is from the client.