Rogue DHCP

I run a public wireless network, and I am somehow being bridged to a DHCP
server on the Vodafone network. I am getting DHCP packets on my 192.168
network from an external 109.115.x.x. Vodafone has offered no help in
locating the subscriber.

What is my best way to sever this connection without disrupting my other 500
users?

Thanks.

"Bruce Johnson" <(E-Mail Removed)> wrote in message
news:803B508B-F60E-4B61-A4E0-(E-Mail Removed)...
>I run a public wireless network, and I am somehow being bridged to a DHCP
> server on the Vodafone network. I am getting DHCP packets on my 192.168
> network from an external 109.115.x.x. Vodafone has offered no help in
> locating the subscriber.
>
> What is my best way to sever this connection without disrupting my other
> 500
> users?
>
> Thanks.


That's a difficult one. Is your DHCP server a DC or in a domain that's
authorized? If so, the rogue DHCP if a Windows machine, shouldn't start it's
services. However, if it's someone's cable/DSL router, it won't honor that.

Can you trace the source of the 109.x.x.x addresses to ann IP address coming
from your DHCP address on your subnet? If so, you can grab the MAC address
and exclude it and let them suffer. Just a thought.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft PSS directly. Please check http://support.microsoft.com
for regional support phone numbers.

"Bruce Johnson" <(E-Mail Removed)> wrote in message
news:803B508B-F60E-4B61-A4E0-(E-Mail Removed)...
>I run a public wireless network, and I am somehow being bridged to a DHCP
> server on the Vodafone network. I am getting DHCP packets on my 192.168
> network from an external 109.115.x.x. Vodafone has offered no help in
> locating the subscriber.

Since the IP Range given out by this "other" DHCP Service,....it means the
connection is "physical". So separate it at the physical level.

Wireless does not stand on its own,...it always runs as an extension to a
cabled network. Wireless is not even a network,...wireless is nothing more
simple than a "patch cable replacement",...in other words all it does is
replace the cable between the PC Nic and the first Switch.

So the problem is that the correct DHCP and this other DHCP are on the same
"wire" at the same time,...so physically separate them. You cannot do that
unless you find the specific physical device doing the DHCP. You have to
inventory everything there and verify what everythig does and how it is
configured. There is not going to be any "insta-fix",...it is going to be
work.


--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"Phillip Windell" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Since the IP Range given out by this "other" DHCP Service,....it means the
> connection is "physical". So separate it at the physical level.

Typo! I left out part of the sentence. It should say:

Since the IP Range given out by this "other" DHCP Service is a different IP
Segment,....it means the connection is "physical" (meaing that you have two
DHCP Services on the same "wire"). So separate it at the physical level.

"Phillip Windell" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
>
> "Phillip Windell" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
>> Since the IP Range given out by this "other" DHCP Service,....it means
>> the connection is "physical". So separate it at the physical level.
>
> Typo! I left out part of the sentence. It should say:
>
> Since the IP Range given out by this "other" DHCP Service is a different
> IP Segment,....it means the connection is "physical" (meaing that you have
> two DHCP Services on the same "wire"). So separate it at the physical
> level.
>
>


I agree.

Funny, I replied to this thread, however I don't see my post. I assume it
came through and others were able to read it.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft PSS directly. Please check http://support.microsoft.com
for regional support phone numbers.

"Ace Fekay [MVP-DS, MCT]" <(E-Mail Removed)> wrote in message
news:O%(E-Mail Removed)...
> I agree.
>
> Funny, I replied to this thread, however I don't see my post. I assume it
> came through and others were able to read it.

I don't see it anywhere.

Hey,... I'll probably be giving you a call later :-)


--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"Phillip Windell" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "Ace Fekay [MVP-DS, MCT]" <(E-Mail Removed)> wrote in
> message news:O%(E-Mail Removed)...
>> I agree.
>>
>> Funny, I replied to this thread, however I don't see my post. I assume it
>> came through and others were able to read it.
>
> I don't see it anywhere.
>
> Hey,... I'll probably be giving you a call later :-)
>
>
> --
> Phillip Windell
>
> The views expressed, are my own and not those of my employer, or
> Microsoft,
> or anyone else associated with me, including my cats.
> -----------------------------------------------------
>

I guess it never showed up! You and the others addressed the issue.

And I'm just reading this now after we spoke!

Ace