unknown RAS dhcp leases

[Guest]

hello all,

I do not use RRAS in my network, but i have a very strange problem:

my dhcp scopes suddenly are full of leases with "unique id" identified as RAS.
in fact i can see, all of my dhcp clients have 2 leases, one working active
(ping ok)and the one identified as RAS (some seconds earlier and not in use).

it's amazing i even have leases for machines with FIXED ips !

my setup is a win2k sp4 server native domain with 2 domain controllers, one
per company site. domain dhcp client computers are winxp pro sp2.

i have a 1Gbps cisco switched network with two vlans with 24bits C class
subnets. dhcp requests for each subnets are forwarded with ip helper addr.



- where does those requests come from ?
- why do i have leases for fixed ip machines ?

i've tried the "netsh ras ip set addrassign pool" with no success.

any help or advice will be very appreciated.
thanks in advance for your time.

 

[ffx]

bump !!

 

[David Troesch]

any help or advice will be very appreciated.

thanks in advance for your time.

Trace the MAC address of the leases back to the client computer, and
verify you don't have a VM (virtual machine) trojan installed on the system.

David Troesch