From: Scott Strobeck (scott@strobeck.net)
Date: Tue Jul 22 2008 - 14:51:05 ART
Josh,
Sounds like it could be a DHCP DOS attack. Whether it's a DOS attack,
or simply a faulty device, or even possibly a network problem not
allowing the requesting device to get the DHCP resonses, I'd start by
figuring out what that 'one MAC address' belongs to.
Joshua wrote:
> Hi,
>
> One of our LAN has a weired issue. When a pc trying to request an ip, dhcp
> server assigned to it, but it cannot take and keep waiting. In router arp
> table, see one MAC address with multiple ip, actually with all available ip
> in the dhcp pool. A windows local server in the LAN and Cisco VPN router and
> 2 Nortel Baystact switch and 2 NetGear switch.
>
> Pls help!
>
> Josh
>
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Mon Aug 04 2008 - 06:11:56 ART