Solved

Local DNS/WINS : can't ping other LAN machines by hostname

Posted on 2010-11-10
22
962 Views
Last Modified: 2012-05-10
I have a "rogue" server running Windows Server 2003.  This machine cannot be a DHCP server.  I can make it a DNS server, I can make it a WINS server, I can configure all of my workgroup's machines to point to any DNS/WINS server in the universe but the absolute, non-negotiable, no consideration possible.

The building's DHCP server assigns the following:

MASK : 255.255.255.0
GW    : 192.168.1.249
DHCP : 192.168.1.253
DNS   : 192.168.1.253
WINS  : 192.168.1.253
NetBIOS over TCP/IP : Enabled

In my workgroup I have various machines with common names:

BILLING-1
BILLING-2
PRINTER-1
ADMIN-1
ADMIN-2

and so on

Plus my Windows 2003 server (which has a static IP)
MYSERVER

The problem is that I can't ping the machines by their local hostnames.

What I want to be able to do is to ping the other machines by local hostname - ping billing-1, ping admin-1, ping server and so on.

What happens is that I get

pinging billing-1.<some domain registered via the DHCP server> [public ip]
Request timed out.

When I ping by IP address I'm connecting just fine.

When I ping -a the ip address I get the machine's hostname just fine.

When I browse the network neighborhood the various machines and devices show up.

But the absolutely critical issue (because of one of the printers, actually) is that I have to be able to connect from  every device to every other device by hostname (without a suffix) alone.

There is no working with the building admin, he will not let me make any changes (or suggestions) to his DHCP server or anything else.

0
Comment
Question by:mingano
  • 11
  • 6
  • 3
  • +2
22 Comments
 

Expert Comment

by:argcyber
ID: 34107039
Hi Mingano,

Have you check for Firewall or Antivirus in your server and computers?

Argcyber.
0
 
LVL 33

Expert Comment

by:Todd Gerbert
ID: 34107068
I kinda sorta get what you're trying to accomplish, but not sure why (which has some impact on your answer)?
Are your computers members of a domain? Is the DNS server the DHCP offering an Active Directory authorized DNS server (i.e. does the DNS server allow your clients to register automatically)?
Are you able to use static IP addresses?
Do the printers get DHCP addresses, and is the necessary communication just from computer -> printer, or does it also need to be computer -> computer?
0
 
LVL 4

Author Comment

by:mingano
ID: 34107070
firewall and antivirus have been checked and are not the issue.
0
 
LVL 7

Expert Comment

by:BobintheNoc
ID: 34107078
Sounds like the dhcp server is providing the connection name, which is being POSTPENDED to the hostname when you ping.

Example, from DHCP, the connection specific suffix is "mybuildingadmin.com", so when you try to resolve billing-1, you're really attempting to resolve billing-1.mybuildingadmin.com.

Since it sounds like you're NOT an active directory structure, you may have to use a period at the end of the hostname to get it to resolve absolutely.

Ping billing-1.

 
0
 
LVL 4

Author Comment

by:mingano
ID: 34107090
I have a static IP address for my Windows server but that is the only one I am guaranteed (network admin won't carve out a block of of the DHCP scope for my printers).

The computers are not members of a domain.  There are no AD considerations.

The biggest thing is to be able to go from printer (printer/scanner actually) --> computer, but being able to ping from computer to computer is a great help when doing normal network diagnostics (such as checking to see if the computer is online).
0
 
LVL 7

Expert Comment

by:BobintheNoc
ID: 34107097
You could also configure the PCs to NOT postpend a domain name, in the TCP/IP configuration, Advanced...DNS, try setting the option for "Append these DNS suffixes (in order):" without adding any suffix, or maybe adding . as a suffix.
0
 
LVL 4

Author Comment

by:mingano
ID: 34107106
Pinging billing-1.  DOES work as expected.  Is there any way we can make it not need the period just in case the network hardware doesn't like doing that?
0
 
LVL 4

Author Comment

by:mingano
ID: 34107111
(Also, when I enter \\printer1 or \\printer1. in the URL bar of my browser I can't get to the machine but I can by entering in the IP address - if this means anything).
0
 
LVL 7

Expert Comment

by:BobintheNoc
ID: 34107122
In regard to the printers--sounds like you've only got a few devices, why not statically configure the IP on the printers and bypass DHCP altogether--just as long as the range of DHCP'able addresses can possibly be adjusted to exclude a few?
0
 
LVL 33

Expert Comment

by:Todd Gerbert
ID: 34107123
Keep in mind you're talking about going from device->computer, so keep in mind even if you change your computers such that you can ping other computers with just a host name, that doesn't necessarily mean you'll be able to also do so from device->computer.
You might need to run a WINS server in order for the devices to resolve names correctly (honestly, I'm a little foggy on how NetBios name resolution works, will have to do a little light reading and get back to ya).
0
 
LVL 7

Expert Comment

by:BobintheNoc
ID: 34107134
Overall though, have you considered running an Active Directory?  Sounds like you've got enough workstations and needs that Small Business Server would address nicely and still be pretty inexpensive.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 7

Expert Comment

by:BobintheNoc
ID: 34107151
Try adding the "." as a suffix in the TCP/IP/DNS/Advanced.. section.
0
 
LVL 4

Author Comment

by:mingano
ID: 34107187
I can't use static IPs - not my DHCP scope.  I'm happy (and lucky) to have the one for my file server.

Can't use Active Directory because I can't use static IPs and don't control the DHCP.  The other guy in the building uses Active Directory for his people, and since it is his building I don't have the option.

0
 
LVL 33

Expert Comment

by:Todd Gerbert
ID: 34107232
You could use a router, assign the one statip IP you have to the outside interface of the router, then use your own addressing scheme for your devices.
0
 
LVL 4

Author Comment

by:mingano
ID: 34107259
Thought about spending the money on the router, the problem is that this is a commercial building and all jacks concentrate to the building-wide switches which are kept in a locked server closet to which I have no access.  I would have to get in there, install my own switch/hub and physically isolate my side of the building or the two DHCP servers would not be playing nicely with each other.
0
 
LVL 4

Author Comment

by:mingano
ID: 34107313
If it helps, here is the network configuration page from the printer.  This is the critical machine that needs to be able to scan to a hostname since the computers on DHCP can't be trusted to retain the same IP.

MFC8480-000002.pdf
0
 
LVL 4

Author Comment

by:mingano
ID: 34107575
The computers are all happy enough to ping the other computers (and even the printer) with hostname. but the printer will not ping any of the computers via hostname. (or by hostname without the . - the printer will ping and therefore connect to machines by IP address only within the LAN, no way to check if it can handle hostnames at all but it is supposed to be able to handle that).
0
 
LVL 4

Author Comment

by:mingano
ID: 34107627
To make things even more confusing, when I ping -a my own IP address I get the following:

Pinging admin2.{local domain}.com [192.168.1.113] with 32 bytes of data:
Reply from 192.168.1.113: bytes=32 time<1ms TTL=128
Reply from 192.168.1.113: bytes=32 time<1ms TTL=128
Reply from 192.168.1.113: bytes=32 time<1ms TTL=128
Reply from 192.168.1.113: bytes=32 time<1ms TTL=128

Ping statistics for 192.168.1.113:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

But when I ping admin2.{local domain}.com the request times out.

When I ping admin2. I get

Reply from fe80::5efe:192.168.1.113%12: time<1ms
Reply from fe80::5efe:192.168.1.113%12: time<1ms
Reply from fe80::5efe:192.168.1.113%12: time<1ms
Reply from fe80::5efe:192.168.1.113%12: time<1ms

0
 
LVL 2

Expert Comment

by:james1001
ID: 34109546
Can you configure wins on the printer? If so you could try removing the dns entries that the printer uses for lookup, that way once the printer is restarted, it should only use the keyhole name, which won't have the dns suffix appended. Not ideal but it may work. You may need to remove the printer ip address from dns during a test an flush the local end resolver using ipconfig /flushdns.
0
 
LVL 7

Expert Comment

by:BobintheNoc
ID: 34117011
Do you have IPV6 installed and bound?
0
 
LVL 4

Accepted Solution

by:
mingano earned 0 total points
ID: 34121748
Solution was to install a new DNS server using "work.local" as the domain, then manually configure all machines to explicitly use that DNS server and no others.
0
 
LVL 4

Author Closing Comment

by:mingano
ID: 34153315
Had to install a new DNS serer
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now