DHCP Reservation is slow / not working completely. ( 1.0.254.169 IP )

One problem i found is the address 1.0.254.169 is an IP address that can cause many errors when trying to do DHCP reservations especially if you are within the same broadcast domain.

1.0.254.169 is the virtual DHCP server IP address of a tool called Himachi made by LogMeIn. When a computer was trying to lease an ip address it would either get 0.0.0.0 or no IP at all with "access denied".

So to Wireshark we turn !


A live capture was done on one of the devices being affected by the issue.
In the capture it was found the broadcast was sent out for DHCP through the correct gateways but the unicast response was sent back from 1.0.254.169.

This virtual IP that responded was a Himachi LogMeIn machine that was running in the same VLAN with promiscuous mode turned on the NIC. 



In order to fix this we turned off the Himachi Gateway and now we no longer are having the weird lease / reservation issues.



Comments

Post a Comment

Popular posts from this blog

HULC LED PROCESS - 3750 High CPU

Image
If you're looking at a switch and you see the HULC LED Process running high. The HULC LED process does some of the following tasks: 1. Check link status on every port 2. If the switch supports POE, it checks to see if there is a power device 3. Transceiver checks 4. Fan status updates 5. Set LED ports 6. Check on temperature status Overall the HULC LED Process is a monitoring process running. During looking into this I turned off all non-used ports since it checks the link status. Then I made sure the environment was good. Two Cisco Bugs: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsi78581 http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtn42790
Read more

%PLATFORM_UCAST-4-PREFIX: --------- TCAM 3750 Switch

Image
 %PLATFORM_UCAST-4-PREFIX:  One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded So what is TCAM ? Ternary Content Addressable Memory is used in multi-layer switching also know as Layer 3 switching. The switches forward the packets and frames at the speed of the line by using ASIC hardware. Normally switches make there forwarding decisions based on Layer 2. TCAM is used for Layer 3 components and other features such as QOS and ACES ( Access List ).  Check TCAM and usage of templates being used in the device.  show sdm prefer ? ! This will show us the templates that can be used in the device to give more resources to one feature or the other. For example the default is the equal resource distribution while the routing gives more resources to Layer 3 routing. show sdm prefer ! The command without the "?" will show us what we are currently r
Read more