Home / server / Questions / 465840
In Process
Tim Long
Asked: 2013-01-11 07:40:55 +0800 CST

Hyper-V Server sends constant stream of DHCP requests causing DoS

  • 772

I have a Hyper-V server that I think the networking components are misconfigured. Even when I've set a static IP address, the server sends a constant stream of DHCP Discover broadcasts (the physical address in the broadcasts matches the Hyper-V host NIC). The DHCP server is responding with Offer responses, but the Hyper-V server just ignores it and sends another request.

This Hyper-V host has 3 NICs, one of which is dedicated to management of the host, the other provides an external network for several VMs. The third (integrated on the motherboard) is not used. There is also a Hamachi VPN adapter although that is not a virtual NIC. Here's wht it looks like: enter image description here

GTi LAN NIC is the one that matches the physical address in the offending DHCP packets. However, DHCP is disabled on that NIC, as you can see here: enter image description here

So I'm at a bit of a loss as to where these DHCP requests are coming from and why. Any ideas?

networking

1 Answers

  1. Problem solved. There was a rogue virtual NIC, which had no business being there, since the management LAN is on a dedicated physical NIC and is not shared with any virtual networks. This rogue virtual NIC was configured to use DHCP and had the same MAC address as the physical NIC.

    Goodness knows what it was doing there - my best guess is that at some time in the past the management was switch over to the other NIC which meant everything was on one NIC, thus requiring the host OS to use a virtual NIC. Who knows? Anyway, deleting the rogue virtual NIC has solved the problem.

    • 1