Has anyone encountered a problem in which MS/Windows is dropping its
DHCP lease?
My MS/Windows XP Pro SP1 laptop became unable to retain its DHCP lease
on my Bering system (Kernel is 2.4.18 #4). It's working fine when I
take it to another network. My other clients (W2K and XP Home systems)
are working fine.
The laptop is doing a DHCPDISCOVER, and it's getting a DHCPOFFER from my
Bering dhcpd. The client responds with a DHCPREQUEST for the perfectly
reasonable address that was offered and the client even acknowledges it.
Then (from the tcpdump trace) the client ARPs for a duplicate IP
address assignment and hears nothing. Then it ARPs the Bering router
at 192.168.1.254 and receives an ARP reply from the router. And then,
Windows XP SP1 does a DHCPRELEASE and drops its lease --- game over.
Checking the laptop (IPCONFIG), I discover that Windows has resorted
to one of those funky Microsoft private addresses at 169.254.92.201.
It used to work just fine and then one day it quit. The most likely
thing that changed was something from Microsoft Update on the client.
Jim Conrad
-----------------------------------------------------------------------------------
Here's a cut/past of my syslog when I power-up my laptop:
Jul 19 15:29:41 firewall dhcpd: DHCPDISCOVER from 00:20:e0:88:b4:11 via
eth0
Jul 19 15:29:42 firewall dhcpd: DHCPOFFER on 192.168.1.4 to
00:20:e0:88:b4:11 vi
Jul 19 15:29:42 firewall dhcpd: DHCPREQUEST for 192.168.1.4 from
00:20:e0:88:b4:
Jul 19 15:29:42 firewall dhcpd: DHCPACK on 192.168.1.4 to
00:20:e0:88:b4:11 via
Jul 19 15:29:45 firewall dhcpd: DHCPRELEASE of 192.168.1.4 from
00:20:e0:88:b4:1
-----------------------------------------------------------------------------------
A more detailed analysis using tcpdump monitoring the laptop's ether
host reveals:
15:30:29.236060 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0x84333143
file ""[|bootp] (ttl 128, id 0, len 328)
15:30:29.236438 192.168.1.254 > 192.168.1.4: icmp: echo request (DF)
(ttl 64, id 15167, len 48)
15:30:30.236746 192.168.1.254.bootps > 192.168.1.4.bootpc:
xid:0x84333143 Y:192.168.1.4 S:192.168.1.254 file ""[|bootp] [tos 0x10]
(ttl 16, id 0, len 328)
15:30:30.241431 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0x84333143
file ""[|bootp] (ttl 128, id 1, len 340)
15:30:30.242066 192.168.1.254.bootps > 192.168.1.4.bootpc:
xid:0x84333143 Y:192.168.1.4 S:192.168.1.254 file ""[|bootp] [tos 0x10]
(ttl 16, id 0, len 328)
15:30:30.348963 arp who-has 192.168.1.4 tell 192.168.1.4
15:30:30.546718 arp who-has 192.168.1.4 tell 192.168.1.4
15:30:31.350595 arp who-has 192.168.1.4 tell 192.168.1.4
15:30:33.181799 192.168.1.4.netbios-ns > 192.168.1.255.netbios-ns: [udp
sum ok]
>>> NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
TrnID=0x8000
OpCode=5
NmFlags=0x11
Rcode=0
QueryCount=1
AnswerCount=0
AuthorityCount=0
AddressRecCount=1
QuestionRecords:
Name=JCMOBILE NameType=0x00 (Workstation)
QuestionType=0x20
QuestionClass=0x1
ResourceRecords:
Name=JCMOBILE NameType=0x00 (Workstation)
ResType=0x20
ResClass=0x1
TTL=300000 (0x493e0)
ResourceLength=6
ResourceData=
AddrType=0x6000
Address=192 (0xc0).168 (0xa8).1 (0x1).4 (0x4)
(ttl 128, id 2, len 96)
15:30:33.251743 arp who-has 192.168.1.254 tell 192.168.1.4
15:30:33.251828 arp reply 192.168.1.254 is-at 0:1:2:4:54:a4
15:30:33.256609 192.168.1.4.bootpc > 192.168.1.254.bootps:
xid:0x92157b44 flags:0x8000 C:192.168.1.4 file ""[|bootp] (ttl 128, id
3, len 328)
15:30:35.634279 0:20:e0:88:b4:11 sap 90 > Broadcast sap 2c rr (r=51,R)
len=332
15:30:35.643039 0:20:e0:88:b4:11 sap 08 > Broadcast sap 36 47/C len=333
15:30:39.642900 0:20:e0:88:b4:11 sap 08 > Broadcast sap 36 47/C len=333
15:30:46.642896 0:20:e0:88:b4:11 sap 18 > Broadcast sap 4f cb/P len=333
-------------------------------------------------------------------------------
My dhcp.conf file seems pretty normal:
authoritative;
default-lease-time 600;
max-lease-time 7200;
option subnet-mask 255.255.255.0;
option domain-name "private.network";
option domain-name-servers 192.168.1.254;
option routers 192.168.1.254;
subnet 192.168.1.0 netmask 255.255.255.0 {
range 192.168.1.1 192.168.1.199;
}
--
Jim Conrad <[EMAIL PROTECTED]>
The Conrads
-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
