ARP entries and server/router going awol.

Posted on 2013-01-14
Last Modified: 2013-05-07
I do some IT support in a local school where quite often the server or the router are no longer pingable, shares disappear and no one can print via the server. This doesn't last but has been wrecking my head for a few weeks.

The arp table on a pc that can no longer communicate with the server or router shows the wrong mac address for the server or router's ip address. On looking up the mac address, the mac address belongs to an Apple or HTC iphone forexample. The school's network is primarily wireless.

Would this be down to the students in  the school assigning the server or router's ip address on their smartphones? Or could it be due to some fault in the unmanaged switches?

Your help is greatly appreciated.

Many thanks in advance,
Question by:endarona
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 30

Expert Comment

ID: 38773901
why aren't you using dhcp for wireless thats the normal way

Author Comment

ID: 38773916
I am using DHCP but I have a suspicion that the students are manaully assigning the ip address of the server or router to their phones. That is my understanding of why the arp table shows an incorrect mac address associated with the server or router's ip address.
LVL 30

Expert Comment

ID: 38773948
I dont understand how your students are using static tell them its against a policy in force and must use dhcp as they are breaking other essential services like servers shares etc
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 38774171
Without knowing for sure, they are setting manual addresses on their phones to cause as much hassle as possible to the network. Again this is only my opinion but apart from the arp tables and being able to see what manufacturer of smartphone the mac addresses are, i have no way of tracking whose phone the mac addresses belong to.
LVL 30

Expert Comment

ID: 38774213
ok I think iphone mac addresses start with 98:fe:94:x:x:x
LVL 10

Accepted Solution

ddiazp earned 500 total points
ID: 38780634
If i was you i'd take the more aggressive approach. Chances is this is an intentional attack and i'd act based on that.

2 Things you could do:

1. Grab that mac address you see different, apply a macl, and block that mac address from accessing the network (from wireless server/router/controller).

2. Create static ARP entries to hardcode the mac address of that IP to the mac of the legitimate device. (this may not fully work but it would improve the scenario).

Author Comment

ID: 38782232
Thanks for the input. Unfortunately the switches are unmanaged. I'm going to go in and try Mike Timmons suggestion as per this link to keep kids smartphones off the wireless network

This all stems from the mess created by Windows 7 showing the wireless key.

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
New IP's needed ASAP 6 83
Print to local printer - Windows 7 RDP 9 66
Cisco Switch VLAN voice and Data 2 80
Raid 6 or Raid 10 configuration 10 121
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
An article on effective troubleshooting
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question