Solved

NSLOOKUP & PING return incorrect IP address on LAN

Posted on 2012-03-21
8
1,083 Views
Last Modified: 2012-03-21
SBS2008 network. The SBS box is in charge on the LAN, running DHCP & DNS.

The network is 10.0.100.x
Subnet 255.255.255.0

PC1 has dynamic IP 10.0.100.11
PC2 has dynamic IP 10.0.100.15

All PCs and servers on the network resolve PC1 & PC2 to 10.0.100.11

There are no hosts or lmhosts entries
I've stopped DNS & DHCP on the SBS box, cleared the DNS resolver cache, released IPs on the clients, restarted DHCP & DNS and reconnected the clients. Same result.

I'm baffled.

Please unbaffle me.
0
Comment
Question by:snooflehammer
8 Comments
 
LVL 3

Expert Comment

by:AirShield
ID: 37750951
What are the names of PC1&2??

Just to test, try adding 10.0.100.11 & 10.0.100.15 to dhcp exclusion list, renew the leases and reset the networks adapters. What happens after the test?
0
 

Author Comment

by:snooflehammer
ID: 37750971
PC1 is called CAMERAS
PC2 is called WS10

I excluded the addresses and forced renewal. They both got different IPs. NSLOOKUP still returns the old IP of 10.0.100.11 for both of them.

Server has 30 updates outstanding. Guess I'll apply them...
0
 
LVL 3

Expert Comment

by:AirShield
ID: 37750976
where are running nslookup from?? does this behavior happens from every PC?

It sounds like a DNS issue, have you tried rebooting the sever after the test?
0
 

Author Comment

by:snooflehammer
ID: 37751000
Every PC on the network. I agree it's DNS-related.

The server is going to reboot once the patches have installed.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 3

Expert Comment

by:AirShield
ID: 37751006
Ok, post back after the reboot.
0
 
LVL 56

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 37751033
Nowhere in your list of things that you did do I see that you removed any DNS records. I'm guessing that if you open the DNS administrative snap-in and view all of the DNS records you will find one that references the PC name you are using and the wrong IP. DHCP will *add* records, but it doesn't delete old ones, and it is legal for one machine to have multiple IP addresses in DNS (for load balancing, round-robin resolution, and other advanced topologies) so that old record can hang out there indefinitely if you don't manually remove it.

Do that, THEN flush the DNS resolver cache, and I think you'll see things start working.

-Cliff
0
 
LVL 4

Expert Comment

by:ltsweb
ID: 37751048
Agree with Cliff!  Check DNS and expand the domain and you will likely find both machine names with same IP.  Delete the one that is incorrect, right click on server name in DNS, Scavenge, and Clear Cache.

See: http://blogs.technet.com/b/askpfe/archive/2011/06/03/how-dns-scavenging-and-the-dhcp-lease-duration-relate.aspx  for an explanation.
0
 

Author Closing Comment

by:snooflehammer
ID: 37751052
In all my years of dealing with Windows servers, and it's been a few, I never knew you could do that. Always happy to learn.

Thanks, man
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
no display on laptop 5 53
Bootable media from MDT 3 30
Register AutoHotkey 12 39
server plus 2 43
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now