I’d like troubleshoot the problem by disabling services one-by-one on the
Packetfence server as you recommend. Here is my list of running services on the
Packetfence server. Any suggestions for which I should disable first?
[root@packetfence pf]# pfcmd service pf status
service|shouldBeStarted|pid
carbon-cache|1|2862
carbon-relay|1|2869
collectd|1|2872
dhcpd|0|0
haproxy|0|0
httpd.aaa|1|2652
httpd.admin|1|2591
httpd.graphite|1|2899
httpd.portal|1|2797
httpd.proxy|1|2735
httpd.webservices|1|2825
iptables|1|-1
keepalived|0|0
p0f|1|2849
pfbandwidthd|0|0
pfdetect|1|2853
pfdhcplistener_eth1.30|1|2719
pfdhcplistener_eth1.31|1|2725
pfdhcplistener_eth0|1|2729
pfdns|1|2709
pfmon|1|2835
pfqueue|1|2693
pfsetvlan|0|0
radiusd-acct|1|2672
radiusd|1|2686
radsniff3|1|2896
redis_queue|1|2648
snmptrapd|0|0
snort|0|0
statsd|1|2887
suricata|0|0
[root@packetfence pf]#
Thank you,
Michael R. Haag
Computer Services Technician
Department of Information Technology
Madison County, NY
(315) 366-2204
From: Louis Munro [mailto:[email protected]]
Sent: Friday, February 19, 2016 12:30 PM
To:
[email protected]<mailto:[email protected]>
Subject: Re: [PacketFence-users] "Duplicate IP Address 0.0.0.0" On Computers
After Installing Packetfence
Hi Michael,
Is 50-67-AE-17-DB-18 the MAC of the PacketFence VM?
Everything I have read yet seems to indicate this is caused by the ip device
tracking on the switch as you said.
You may have to capture some DHCP and ARP traffic from the windows device (e.g.
with wireshark) to be able to see where those packets come from, and in which
order.
This problem seems to stem from ARP queries.
None of the PacketFence services should be making ARP queries per se, so that
makes me suspicious of this coincidence.
If in doubt, try shutting down services listening on the management interface
of the PacketFence ZEN until you hit the right one.
And try to capture traffic from both ends (PacketFence and the windows client).
I wish I could tell you more, but it’s a case of “insufficient data” at this
point.
I’d say tcpdump and wireshark are your best friends for such a case.
Regards,
--
Louis Munro
[email protected]<mailto:[email protected]> ::
www.inverse.ca<http://www.inverse.ca>
+1.514.447.4918 x125 :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and
PacketFence (www.packetfence.org<http://www.packetfence.org>)
On Feb 19, 2016, at 10:05 , Michael R. Haag
<[email protected]<mailto:[email protected]>>
wrote:
After setting up Packetfence (with help from Inverse), we’re seeing Duplicate
IP Address messages on Windows hosts on our network (Mostly Windows 7, some
Windows 10).
Microsoft and Cisco both indicate perhaps this message is caused by the “ip
device tracking” feature of Cisco switches (we’re using 2960X).
I first set up a “probe delay” on the feature, but that did not resolve the
issue so I completely disabled ip device tracking on the switches.
Hosts on the switches are still receiving the error, but only when our
Packetfence ZEN appliance is up. If I power it off, no one gets the duplicate.
The address reported as duplicate is always “0.0.0.0”.
From windows event log:
“Description:
The system detected an address conflict for IP address 0.0.0.0 with the system
having network hardware address 50-67-AE-17-DB-18. Network operations on this
system may be disrupted as a result.”
Which feature of Packetfence could be causing this problem? (I am not running
dhcpd on Packetfence)
Thank you,
Michael R. Haag
Computer Services Technician
Department of Information Technology
Madison County, NY
(315) 366-2204
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140_______________________________________________
PacketFence-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
