Re: [pfSense Support] Vista DHCP Issue
Curtis, or anyone else who can replicate problems with a Vista client, ditto, capturing the DHCP request in Wireshark and sending me the pcap would be appreciated. Chris, I won't be at that client today, but I should be there this weekend or early next week and will get that for you. In my case, I have 5 Vista machines all with different patch levels and all different vendors, a switch infrastructure of Cisco 3750's and 3650's, and pfsense 1.2.2. Curtis LaMasters http://www.curtis-lamasters.com http://www.builtnetworks.com - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Vista DHCP Issue
On Fri, Oct 2, 2009 at 8:03 AM, Curtis LaMasters curtislamast...@gmail.com wrote: I won't be at that client today, but I should be there this weekend or early next week and will get that for you. Great, I'm curious. In my case, I have 5 Vista machines all with different patch levels and all different vendors, a switch infrastructure of Cisco 3750's and 3650's, and pfsense 1.2.2. Jim sent me a pcap of the DHCP traffic from a host with the broadcast flag on, it is indeed setting it and he gets a response just fine. He is using 1.2.3-RC versions currently, but that box has been through 1.2.1, 1.2.2, and various 1.2.3 versions without ever having a problem. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
[pfSense Support] Vista DHCP Issue
I've searched around and read about others with this issue. Basically I have 5 different Vista laptops that cannot get a DHCP address unless I modify the registry and disable a broadcast setting. Does anybody have a solution to this that would prevent me from having to touch each workstation? They are public computers and not part of a domain otherwise I would just do it via GPO. Curtis LaMasters http://www.curtis-lamasters.com http://www.builtnetworks.com - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Vista DHCP Issue
Curtis LaMasters wrote: I've searched around and read about others with this issue. Basically I have 5 different Vista laptops that cannot get a DHCP address unless I modify the registry and disable a broadcast setting. Does anybody have a solution to this that would prevent me from having to touch each workstation? They are public computers and not part of a domain otherwise I would just do it via GPO. This one is new to me. I have Vista machines at home and at work, and at customer sites all behind pfSense and I've never had a problem obtaining an IP address from DHCP. Is there some other contributing factor perhaps? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Vista DHCP Issue
On Thu, Oct 1, 2009 at 4:10 PM, Curtis LaMasters curtislamast...@gmail.com wrote: I've searched around and read about others with this issue. Basically I have 5 different Vista laptops that cannot get a DHCP address unless I modify the registry and disable a broadcast setting. Does anybody have a solution to this that would prevent me from having to touch each workstation? If you can find a solution for ISC dhcpd we'd implement it. I'm not sure exactly how that ends up set on some Vista systems but not others. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Vista DHCP Issue
Chris Buechler wrote: On Thu, Oct 1, 2009 at 4:10 PM, Curtis LaMasters curtislamast...@gmail.com wrote: I've searched around and read about others with this issue. Basically I have 5 different Vista laptops that cannot get a DHCP address unless I modify the registry and disable a broadcast setting. Does anybody have a solution to this that would prevent me from having to touch each workstation? If you can find a solution for ISC dhcpd we'd implement it. I'm not sure exactly how that ends up set on some Vista systems but not others. My repair bench segment is also behind pfSense, and it has seen hundreds of different machines of all makes and models, many of them using Vista, and I've not had one yet that couldn't pull an IP address from DHCP on pfSense. It's always Just Worked(tm) Could this be induced by the switch, perhaps? Jim - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Vista DHCP Issue
On Thu, Oct 1, 2009 at 6:07 PM, Jim Pingle li...@pingle.org wrote: Chris Buechler wrote: On Thu, Oct 1, 2009 at 4:10 PM, Curtis LaMasters curtislamast...@gmail.com wrote: I've searched around and read about others with this issue. Basically I have 5 different Vista laptops that cannot get a DHCP address unless I modify the registry and disable a broadcast setting. Does anybody have a solution to this that would prevent me from having to touch each workstation? If you can find a solution for ISC dhcpd we'd implement it. I'm not sure exactly how that ends up set on some Vista systems but not others. My repair bench segment is also behind pfSense, and it has seen hundreds of different machines of all makes and models, many of them using Vista, and I've not had one yet that couldn't pull an IP address from DHCP on pfSense. It's always Just Worked(tm) Could this be induced by the switch, perhaps? It's the DHCP broadcast flag that causes problems. http://support.microsoft.com/kb/928233 I'm not sure why it's inconsistent. I suspect some PC manufacturers probably changed that default to avoid support headaches. Windows 7 switched it back to off by default so obviously MS realized what a wreck that one was in Vista (one of a long list). - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Vista DHCP Issue
Chris Buechler wrote: On Thu, Oct 1, 2009 at 6:07 PM, Jim Pingle li...@pingle.org wrote: Chris Buechler wrote: On Thu, Oct 1, 2009 at 4:10 PM, Curtis LaMasters curtislamast...@gmail.com wrote: I've searched around and read about others with this issue. Basically I have 5 different Vista laptops that cannot get a DHCP address unless I modify the registry and disable a broadcast setting. Does anybody have a solution to this that would prevent me from having to touch each workstation? If you can find a solution for ISC dhcpd we'd implement it. I'm not sure exactly how that ends up set on some Vista systems but not others. My repair bench segment is also behind pfSense, and it has seen hundreds of different machines of all makes and models, many of them using Vista, and I've not had one yet that couldn't pull an IP address from DHCP on pfSense. It's always Just Worked(tm) Could this be induced by the switch, perhaps? It's the DHCP broadcast flag that causes problems. http://support.microsoft.com/kb/928233 I'm not sure why it's inconsistent. I suspect some PC manufacturers probably changed that default to avoid support headaches. Windows 7 switched it back to off by default so obviously MS realized what a wreck that one was in Vista (one of a long list). I have also had this problem with Vista clients and pfSense DHCP. I have seen it first hand, my XP laptop will grab it while the Vista won't on the same exact connection. Generally i tell my customer that it's not our problem and Vista is broken. Call Microsoft and explain that Windows XP can get online and Vista can't. I also tell my customers to run windows update and make sure the system is patched up. In one situation we had a HP procurve switch installed. We had tons of complaints that vista would not work but XP would. We replaced it with a Cisco 2950 and the complaints stopped. I have no idea why that would cause it to work. I have just come to believe Vista is on par with Windows ME for the worst OS ever. I've heard nothing but good things from windows 7 so far. I really hope Microsoft got it together this time. Adam - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Vista DHCP Issue
apiase...@midatlanticbb.com wrote: In one situation we had a HP procurve switch installed. We had tons of complaints that vista would not work but XP would. We replaced it with a Cisco 2950 and the complaints stopped. I have no idea why that would cause it to work. I have just come to believe Vista is on par with Windows ME for the worst OS ever. My switches at work are all Cisco 2924 and 2950s. My one at home is just the back end of a Linksys WRT54Gv5 though. Haven't had a problem with either one. One customer site off the top of my head that also has pfSense+Vista has a 24 port Netgear 10/100 switch. I don't know of anyone with HP switches though personally. A couple of the threads I read suggested that the replies to a broken Vista request might not be making out of the NIC on the server side, or if it is, it may not be making it back to the clients. Some tcpdump/wireshark output from a broken request and reply from the server and client might be enlightening. If the packets don't leave the server NIC, you could try a few random things like disabling checksums to see if it makes any difference (not that it should, but it's something to try...) Jim - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
RE: [pfSense Support] Vista DHCP Issue
On Thu, Oct 1, 2009 at 6:07 PM, Jim Pingle li...@pingle.org wrote: Chris Buechler wrote: On Thu, Oct 1, 2009 at 4:10 PM, Curtis LaMasters curtislamast...@gmail.com wrote: I've searched around and read about others with this issue. Basically I have 5 different Vista laptops that cannot get a DHCP address unless I modify the registry and disable a broadcast setting. Does anybody have a solution to this that would prevent me from having to touch each workstation? If you can find a solution for ISC dhcpd we'd implement it. I'm not sure exactly how that ends up set on some Vista systems but not others. My repair bench segment is also behind pfSense, and it has seen hundreds of different machines of all makes and models, many of them using Vista, and I've not had one yet that couldn't pull an IP address from DHCP on pfSense. It's always Just Worked(tm) Could this be induced by the switch, perhaps? I've had it happen first hand... it's a pain in the *ss!!! Sometimes an elevated CMD prompt - ipconfig /release /renew works But I'd say it's about an 45% success rate. Next step is to disable/renew the adapter - that brings it to about a 65% success rate. This is after following the broadcast regedits - turning off IP6, etc on this machine btw. The good news is that it only happens about once a month, but when it does - man it's annoying. I do run procurve switches on my network - by dhcp server is a windows 2003 server. (pfSense being the gateway though) If anyone else finds a permanent solution - shout it out - because I've yet to find one. (My only permanent solution so far - was to upgrade to the RTM of win7) -Tim - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Vista DHCP Issue
Tim Dickson wrote: On Thu, Oct 1, 2009 at 6:07 PM, Jim Pingle li...@pingle.org wrote: Chris Buechler wrote: On Thu, Oct 1, 2009 at 4:10 PM, Curtis LaMasters curtislamast...@gmail.com wrote: I've searched around and read about others with this issue. Basically I have 5 different Vista laptops that cannot get a DHCP address unless I modify the registry and disable a broadcast setting. Does anybody have a solution to this that would prevent me from having to touch each workstation? If you can find a solution for ISC dhcpd we'd implement it. I'm not sure exactly how that ends up set on some Vista systems but not others. My repair bench segment is also behind pfSense, and it has seen hundreds of different machines of all makes and models, many of them using Vista, and I've not had one yet that couldn't pull an IP address from DHCP on pfSense. It's always Just Worked(tm) Could this be induced by the switch, perhaps? I've had it happen first hand... it's a pain in the *ss!!! Sometimes an elevated CMD prompt - ipconfig /release /renew works But I'd say it's about an 45% success rate. Next step is to disable/renew the adapter - that brings it to about a 65% success rate. This is after following the broadcast regedits - turning off IP6, etc on this machine btw. The good news is that it only happens about once a month, but when it does - man it's annoying. I do run procurve switches on my network - by dhcp server is a windows 2003 server. (pfSense being the gateway though) If anyone else finds a permanent solution - shout it out - because I've yet to find one. (My only permanent solution so far - was to upgrade to the RTM of win7) -Tim I'm wondering if a patch was added to windows update at some point to fix the problem. Is your Vista totally updated? I find it really interesting, that your using Microsoft DHCP service. According to Microsft should be fully compatible with Vista. I would suggest swapping your switch out, to see if it helps. Cisco or Linksys seem to be okay. Adam - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Vista DHCP Issue
apiase...@midatlanticbb.com wrote:
I'm wondering if a patch was added to windows update at some point to
fix the problem. Is your Vista totally updated?
Just this week I've had my hands on several fully patched Vista machines
(including my laptop) as well as two other laptops -- one with Vista and
no service packs or updates at all, and one with only SP1 present. All
of them worked.
It's very inconsistent. I wish I could reproduce it somewhere, it would
make investigating it easier.
I just checked on my laptop, http://support.microsoft.com/kb/928233 (the
KB article linked by Chris in another post in this threat) mentions a
registry setting to force the broadcast flag off for non-Windows DHCP
Servers:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{GUID}
DhcpConnForceBroadcastFlag=dword:
On my laptop this is set to 1, and it still works for me. I've even
plugged directly into my ALIX with no switch and pulled an IP from there
with this laptop, no switch involved.
Makes me really suspect some kind of combination of switch, NIC
brand/driver on the pfSense box, or some other interaction of that
nature. The only way to track it down is probably to collect more data
about setups where the problem appears. When it comes to managed
switches, there could even be a setting on the switch that causes (or
prevents) the problem from appearing.
Jim
-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com
Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Vista DHCP Issue
On Fri, Oct 2, 2009 at 1:06 AM, Jim Pingle li...@pingle.org wrote:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{GUID}
DhcpConnForceBroadcastFlag=dword:
On my laptop this is set to 1, and it still works for me. I've even
plugged directly into my ALIX with no switch and pulled an IP from there
with this laptop, no switch involved.
Interesting. I long ago blew away every Vista install I had, mind
sending me a pcap of a DHCP request from a host with that enabled?
Curtis, or anyone else who can replicate problems with a Vista client,
ditto, capturing the DHCP request in Wireshark and sending me the pcap
would be appreciated.
-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com
Commercial support available - https://portal.pfsense.org
