Have a IBM x3650 server running windows 2003 with 2 broadcom nic cards. Only one of the nic's is enabled. The server is set with a static ip address.
Yesterday I noticed an entry on our DHCP server(2003 server) with a MAC address that was not familiar. I searched for and found this MAC address on one of our switches and followed the cable to to this IBM server.
I cannot figure out why this server is requesting a dynamic IP. To be safe I installed mac filter call out on the dhcp server to deny this mac address from getting an ip address.
I can see in the mac filter log that this mac address is being denied an address about every 2 minutes.
Also when I originally saw this mac address on the dhcp server the computer name was the last 6 digits of it's mac address. I opened the broadcom program and checked the mac address of the other nic and it does not match the one that is trying to get an address.
Any ideas on what could be causing this? Maybe another piece of hardware on the server?
Windows Server 2003DHCP
Last Comment
ksaum11
8/22/2022 - Mon
Patrick Tallarico
Do you have this server doing any virtualization? It could be from something like that...
ksaum11
ASKER
No, this server is not a virtual server.
I also wanted to add that I did a search on the unknown MAC address and it comes up as something from IBM......
gortm001
Is the server running any teaming software, so you could use botrh broadcoms as one NIC, thus creating a failover situation? This software may be spoofing the macaddress to get an IP Address. Since you have disabled the second nic, i wouls suggest you disable the teaming software, if any.
In the boardcom application there was a teaming setup but it was disabled as well. I also delted it just in case since we are not using it.
I also went into the BIOS setup and tried to find something but the only mac addresses that were visible were for the two nic cards that do not match this unidentified mac address.