我们正在运行Windows 2008 R2 DHCP服务器。 我们刚刚添加了一个新的DHCP服务器,并在大约三个星期前删除了旧的。
我有一位员工在过去一周里每天都在报告IP冲突错误。 我检查了DHCP日志,发现零冲突。 我也将冲突检测尝试提高到1以避免问题。
我在日志中发现的唯一奇特的事情是他的界面尝试更新IP的次数。 这里是一个例子:
30,12/19/13,17:41:34,DNS Update Request,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 11,12/19/13,17:41:34,Renew,192.168.1.109,Galen-THINK.example.com,8C705257C4D2,,941800471,0,,, 32,12/19/13,17:41:34,DNS Update Successful,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 30,12/19/13,17:41:38,DNS Update Request,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 11,12/19/13,17:41:38,Renew,192.168.1.109,Galen-THINK.example.com,8C705257C4D2,,941800471,0,,, 32,12/19/13,17:41:38,DNS Update Successful,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 30,12/19/13,17:41:42,DNS Update Request,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 11,12/19/13,17:41:42,Renew,192.168.1.109,Galen-THINK.example.com,8C705257C4D2,,941800471,0,,, 32,12/19/13,17:41:42,DNS Update Successful,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 30,12/19/13,17:41:49,DNS Update Request,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 11,12/19/13,17:41:49,Renew,192.168.1.109,Galen-THINK.example.com,8C705257C4D2,,941800471,0,,, 32,12/19/13,17:41:49,DNS Update Successful,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 30,12/19/13,17:42:07,DNS Update Request,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 11,12/19/13,17:42:07,Renew,192.168.1.109,Galen-THINK.example.com,8C705257C4D2,,2755917027,0,,, 32,12/19/13,17:42:07,DNS Update Successful,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 30,12/19/13,17:42:10,DNS Update Request,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 11,12/19/13,17:42:10,Renew,192.168.1.109,Galen-THINK.example.com,8C705257C4D2,,2755917027,0,,, 32,12/19/13,17:42:10,DNS Update Successful,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 30,12/19/13,17:42:17,DNS Update Request,192.168.1.109,Galen-THINK.example.com,,,0,6,,, 11,12/19/13,17:42:17,Renew,192.168.1.109,Galen-THINK.example.com,8C705257C4D2,,2755917027,0,,, 32,12/19/13,17:42:17,DNS Update Successful,192.168.1.109,Galen-THINK.example.com,,,0,6,,,
那么这可能是他看到IP冲突错误的原因吗? 如果没有,我怎样才能进一步调查原因?
谢谢!
这种冲突可能是由于networking上的其他人将相同的IP硬编码到设备上。
在为具有问题的用户分配静态IP(用于testing目的)之后,我会对networking进行nmap扫描。
如果您发现networking中正在使用192.168.1.109,则需要查找设备,这将涉及通过arp表跟踪MAC地址到交换机上的端口。