PC obtaining different subnet and gateway

Hey all,
I am not finding the solution of my problem which is as follows–
I have DHCP configured on my mikrotik router with LAN ip pool as 172.30.1.0/24.Now from past few days i am finding that whenever any desktop is having automatic IP form my router’s DHCP then they are having ip like below–
IP -172.30.1.x
subnet-255.255.254.0
gateway-192.168.30.10
but this is not the right info as it should be
subnet-255.255.255.0
gateway-my router address which is 172.30.1.2
huh…

for solution if i assign the IPs manually then its all ok and working…but how to deal with this???
Is this a virus???

Please help me in this

Thanks in advance
rak
ravitripathi.81@indiatimes.com

It looks like you have more than one DHCP server on your network. Check other devices and make sure you haven’t inadvertently left a DHCP server switched on somewhere else.

I would check for a device with the address 192.168.30.10 as that’s the most likely source, as DHCP servers are often on gateway devices. If you’re using some version of Microsoft Windows open up a Command Windows (DOS Window) and type ipconfig /all at the prompt, this will give you a list of your interfaces and it should tell you the address of the DHCP server.

Regards

Chris Macneill

Check

IP → DHCP → Networks.

You might have changed a setting here by mistake. It can be different to what you have in IP Pools…

thanks for reply :slight_smile:
but i have checked in IP->DHCP Server->Networks option and the Address,Gateway and DNS server are very right as previous.
One more thing is that is it a virus???but how can we have virus on linux-router??? :astonished:
kindly help me out to resolve this as its killing me.. :frowning:
Thanks in advance
rak

no bro i have tested already as the IP its alloting is not pinged by any where..so that means that it is not existing any where.
there is only one DHCP configured in my network and thats my linux router

please have a view and please reply so that i trace it out ASAP
Thanks in advance
rak

Seen this before. Its a virus that causes it. I believe if you have a system with antivirus 2009-2010 it can happen. To fix it run malware bytes on all machines and also run your virus scanners