Why are IP's being assigned in DHCP that are not from my Scope

Posted on 2012-08-28
Last Modified: 2012-08-28

I have 1 DHCP server that we have been successfully using for the 3 plus years.  The Server is a Windows 2003 Server.  This Server acts as :

1.  Active Directory Server.
2.  DHCP Server.
3.  DNS Server.
4.  Backup Server.

The DHCP scope is (Starting) - (Ending).  The Server's IP address is 192.168.1.X; but, the scope that is gives out is 10.220.21.X/24 .  This problem is only with PC's on the DHCP Vlan.

One may wish to referece another separate Experts question as well

Our Windows Domain Client PC's receive DHCP on a specific VLan(DHCP relay is enabled) and again it has been working fine for 3 - Plus years.  But recently some computers on the DHCP VLan are not connecting into the network.  When I check to see what is going on with the "rouge" pc's I notice that they have a different IP address.

IP:             192.168.1.X
Def. Gtwy:

Which is weird because the 192.168 - Scheme that the DHCP server uses is different.  The IP  Scheme (for what we call VLan-1) is:

IP:              192.168.1.X
Def. Gtwy:

So, to correct the 'Rouge' pc's that are not getting on our network and are on the DHCP VLan, I just open a command prompt and type

1.  ipconfig <enter>
     a.  I see the incorrect ip-scheme.

2.  ipconfig /release <enter>
     a.  to zero out the ip address info.

3.  ipconfig /renew <enter>
     a.  to pull a new (and correct) ip address.
     b.  10.220.21.X

4.  problem solved.

This is happening to more and more users, if they turn on their PC's with time.  If the users do not restart they are fine.  Its an easy fix; but, it is annoying?

My 2 questions are:

1.  Why is this happening.

2.  What can I do to stop this from happening?

I thought that someone connected a home router into a DHCP VLan'd network jack.  And this other router is competing with the corporate network to give out IP Addresses.
Question by:Pkafkas
    LVL 37

    Accepted Solution

    I would start looking for a rogue device handing out DHCP. Maybe a wireless access point or a new router of some description. is indicative of a default DHCP server handing out addresses somewhere.
    LVL 23

    Assisted Solution

    by:Suliman Abu Kharroub
    While the clicnt is using the incorrect ip config, run

    ipconfig /all

    it will show the DHCP server which offered the IP address to that client.
    LVL 6

    Assisted Solution

    Sounds like someone on your network has plugged in a switch or router of their own.  A home router usually comes with DHCP enabled and issues addresses begining with 192.168.1.x.
    LVL 2

    Assisted Solution

    Sounds to me like someone decided they wanted to hook up a wireless router by themselves.  I've seen this so many times, it's annoying beyond belief.

    Sulimanw has the right idea, see what the DHCP server is / default gateway and track that puppy down.

    Author Comment

    My suspisions and everyone else's in this thread are correct.  It was a rouge DHCP router that someone clied teh reset buttoon and becasue of that it collected an IP address with DHCP and it gave out IP Addresses with DHCP (with no password).

    That explains this case and another question that I asked.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    Join & Write a Comment

    I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
    This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now