You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Fariborz Navidan <md...@gmail.com> on 2019/07/30 13:40:13 UTC

How to prevent DHCp conflict?

Hello,

Guests have started not to obtain IP from VR. Instead, they are obtaining
IP from a DHCp which does not belong to CloudStack network. It may be
either an external DHCp server in nearby servers/network in data center or
a  user's VM which is running Dhcp server. All new VM reach VR to obtain
password and user data. Please advise.

Thanks

Re: How to prevent DHCp conflict?

Posted by Andrija Panic <an...@gmail.com>.
check if that MAC address exists in the "nics" table in DB - if not - then
it's not an ACS VM.

Are you running a Shared network or Isolated/VPC - I don't understand how
can custom-built DHCP that exists on a user VM reach out to

Andrija

On Wed, 31 Jul 2019 at 09:42, Fariborz Navidan <md...@gmail.com>
wrote:

> Hello,
>
> As we don't run any other DHCP server in our network, it looks like someone
> is running DHCP server on their VM which conflicts with VR's DHCP server. I
> ran arping against the conflicting DHCP server's IP address through
> cloudbr0 and i get replies from it's MAC address. However I'm not sure if
> this is MAC of a VM's interface or they are running a sort of
> nestedhypervisor and it belongs to a nested VM. How do I trace and find the
> abusive VM to stop the conflict?
>
> TIA
>


-- 

Andrija Panić

Re: How to prevent DHCp conflict?

Posted by Fariborz Navidan <md...@gmail.com>.
Hello,

As we don't run any other DHCP server in our network, it looks like someone
is running DHCP server on their VM which conflicts with VR's DHCP server. I
ran arping against the conflicting DHCP server's IP address through
cloudbr0 and i get replies from it's MAC address. However I'm not sure if
this is MAC of a VM's interface or they are running a sort of
nestedhypervisor and it belongs to a nested VM. How do I trace and find the
abusive VM to stop the conflict?

TIA

Re: How to prevent DHCp conflict?

Posted by je...@gmail.com.
As I learned this is a networking issue not a cloudstack issue.

See my previous thread, Yipingresponse is what worked for me.
https://lists.apache.org/thread.html/51e005eb7730124d1ecb17adb8ca995a4ae5114d88f6e698b2219587@%3Cusers.cloudstack.apache.org%3E

HTH,

 Jesse

On Tue, Jul 30, 2019 at 9:40 AM Fariborz Navidan <md...@gmail.com>
wrote:

> Hello,
>
> Guests have started not to obtain IP from VR. Instead, they are obtaining
> IP from a DHCp which does not belong to CloudStack network. It may be
> either an external DHCp server in nearby servers/network in data center or
> a  user's VM which is running Dhcp server. All new VM reach VR to obtain
> password and user data. Please advise.
>
> Thanks
>