Re: How to avoid router broadcast to windows clients?

From: Berni (btarillion_at_yahoo.com)
Date: 03/22/05


Date: Tue, 22 Mar 2005 09:19:35 +0100

Thanks Steven for the feedback.
Unfortunetyl I don't know the configuration of the DSL router that was
attached to our LAN, the strange thing is that the IP has remain from our
official DHCP server, only the Gateway was changed...

Best regards,

Berni

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:uRg4yZlLFHA.3928@TK2MSFTNGP09.phx.gbl...
> You might also want to post your question in one of the Microsoft
> networking newsgroups such as for win2000 or server. What could have
> happened is that your computers were responding to the DHCP server built
> into the NAT router. An Ipconfig /all could confirm that or not. According
> to the link below router discovery protocol is disabled by default in at
> least Windows 2000. Either way it is a bad situation and at minimum you
> should have a computer/network user policy that prohibits such activity
> with defined consequences and signed by all users with the signed copy in
> their file. In my opinion something like this should warrant at least a
> three day work/school suspension. If this was a wireless device it could
> also expose your network to the world.
>
> Technical solutions could be filtering at your switches. Many managed
> switches can block port access by not allowing unauthorized mac addresses
> to access the port. Mac filtering can be spoofed by determined users but
> that should call for termination. 802.1X switch access can be much more
> effective that mac filtering but it also has some vulnerabilities and is
> much more difficult to configure in that it requires the use of compatible
> operating systems, A Certificate Authority on the network to issue all
> computers certificates, and the use of IAS for computer authentication.
> Ipsec normally is a good strategy to protect network resources but ipsec
> currently can not effectively control DHCP traffic since it is mostly
> broadcast based. --- Steve
>
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;269734
>
> "Berni" <btarillion@yahoo.com> wrote in message
> news:OU%23$GDfLFHA.2252@TK2MSFTNGP15.phx.gbl...
>> Hi all,
>> Last week we had somebody at our LAN plugging an ADSL router configured
>> with Ip address 192.168.1.1 and RIP v1
>> , of course the router started to broadcast it's presence ...
>> Most if not all Workstations accepted the broadcast and took 192.168.1.1
>> as their GW instead of the DHCP supplied one even the one with SP2 FW ..
>> Needless to say that it was a chaos .
>> Is this a normal behaviour ? ( 192.168.1.1 is Not in the subnet of the
>> Lan interface of the PC !)
>>
>> what can I do to avoid that in the future ?
>>
>> Thanks in advance for any ideas / feedbacks.
>>
>> Best regards,
>>
>> Berni
>>
>>
>
>



Relevant Pages

  • Re: Loss of Connectivity on Only One PC on a LAN
    ... When you ran the Network Setup Wizard, ... The original setup of the LAN was done entirely by the user of the other PC on that LAN in July. ... I use a LAN connection which consists of two PCs each connected to a Linksys BEFSR 41 Router. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Cannot see Workgroup PCs through new router
    ... We know now it's not the router at fault. ... On W2k, try "Search" - for files etc., then computers. ... networks in terms of getting PCs to access each other by ... I seem to have been very lucky: both my own network (two XP ...
    (uk.telecom.broadband)
  • Re: No files showing
    ... On the wireless I can pick up the network, get on the internet but I can't ... Let's start by looking at "ipconfig /all" from both computers. ... The router is a Dlink 524, ...
    (microsoft.public.windowsxp.network_web)
  • Re: VPN over wireless
    ... You will still the need the Router to issue DHCP and wireless ... network but still access to the internet. ... LAN Router Wireless Router ...
    (microsoft.public.windows.server.sbs)
  • Re: Sharing a printer
    ... Here are general network troubleshooting steps. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall or overlooked firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ... On the assumption that you in fact do have a router that connects to the Internet and that your computers then connect to the router, then if you think that you have one IP for multiple computers then you probably are using a website tool such as http://whatismyip.com/ That shows the your public IP address -- the one that the rest of the world sees. ...
    (microsoft.public.windowsxp.network_web)