Solaris static IP changed (non DHCP)


 
Thread Tools Search this Thread
Operating Systems Solaris Solaris static IP changed (non DHCP)
# 1  
Old 06-05-2017
Solaris static IP changed (non DHCP)

We have 2 solaris 10 t5240 servers with static IP addresses on nxge0 I/F which were rebooted a few days back with a known good config that has been in place for years (for /etc/hosts, /etc/hostname.nxge0, /etc/netmasks, etc)

They are not using dhcp.

About the same time today, both of their IPs changed to that of a 3rd server and the I/F's went down as seen in ifconfig -a. We had to login from the console and change them back and up the I/F.

I didn't see in bash_history that someone had typed an ifconfig nxge0 statement. I didn't see anything much in /var/adm/messages.

Any ideas?
# 2  
Old 06-06-2017
Had the config files for the network configuration changed? I regret that I can't remember where it is defined on Solaris (the last Solaris server I had was 2.6 Smilie)

A few thoughts:-
  • Have you examined the output from dmesg which is written before the syslog daemon starts?
  • Did they DHCP somehow?
  • Do they boot from local disk or is it SAN provided?
  • Has anyone run sysunconfigure, which would destroy the identity of the server (hostname, network config, host lookup, etc.)

I'm not sure how helpful these will be, but it might bring something to light.




Robin
# 3  
Old 06-06-2017
Have you examined the output from dmesg which is written before the syslog daemon starts?
dmesg > somefile looks like /var/adm/messages did: normal operations then a bunch of 390400 kern messages which could have been the results of the network change when the localhost IP changed. The server was booted days ago and used the proper IP. It was in-flight days later that it did this -- on two independent servers at the same time. Each had been rebooted a day from the other after DRPC patching.

Did they DHCP somehow? No log of such and daemon is not running and there are no dhcp config files

Do they boot from local disk or is it SAN provided?
Local disk

Has anyone run sysunconfigure, which would destroy the identity of the server (hostname, network config, host lookup, etc.)
No. All the files /etc/hosts /etc/hostname.nxge0 /etc/netmasks etc untouched with old timestamps. Also bash_history doesn't show commands were entered.

Thanks

Last edited by hdatontodo; 06-06-2017 at 10:30 AM..
# 4  
Old 06-06-2017
Both at the same time?

How exact is that "same" time? Who was logged on to the servers at that time?

Are you running auditing?
# 5  
Old 06-06-2017
Quote:
Originally Posted by achenle
Both at the same time?

How exact is that "same" time? Who was logged on to the servers at that time?

Are you running auditing?
Hi

One server had the problem at 11:58am, one at 11:59.

One guy was logged in about 15 mins before checking if a port was listening but his ticket notes only show he checked that.

Auditing is not enabled.

Thanks
# 6  
Old 06-06-2017
On Solaris 10 it is possible to change the system ip address without a reboot.

For example:
HowTo: Change IP Address in Solaris 10 without reboot | ItsyourIP.com

but that means someone has to mess with the network config files and have the rights to restart the service to have the changes take effect. They'd need root rights for that, me thinks. A bit of a mystery!
# 7  
Old 06-09-2017
Quote:
Originally Posted by hdatontodo
Hi

One server had the problem at 11:58am, one at 11:59.

One guy was logged in about 15 mins before checking if a port was listening but his ticket notes only show he checked that.

Auditing is not enabled.

Thanks
How did you check who was logged in?

I'd check what's in root's crontabs, and also the modification time of the crontab files in /var/spool/crontab.

And then I'd enable auditing.

The mystery here isn't "what", the mystery is "who". The real problem is failing to own up to a mistake - we all make them.

It's the hiding of the mistake that's an indication of a problem admin, because now you start wondering what other mistakes are being hidden because you now know you can't trust that admin to admit mistakes.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. IP Networking

Node switched itself from static to DHCP on reboot issue

I'm trying to figure out what circumstances would cause an Open Solaris 11.2 host to switch itself from a static to a DHCP ip address upon reboot. This has only happened once but is a cause for some concern as this machine will be part of a web server pool. Nothing has changed on the LAN that... (2 Replies)
Discussion started by: SmokeyJoe
2 Replies

2. HP-UX

[Solved] Static or DHCP IP in HP-UX

Hi, I can find the IP details whether it is Static or dynamic in Linux machine from the location /etc/sysconfig/network-scripts/ifconfig-eth0 configuration file. Can someone suggest a location to find the same in HP UX machines? -Vivek (2 Replies)
Discussion started by: vkk
2 Replies

3. Red Hat

Purpose of Static IP address through DHCP

Hi All, Could you please explain the purpose of assigning the static IP by using the DHCP Concept. Like by using the clients MAC address we assign the static IP Address. Waiting for your reply. Thanks in Advance. (6 Replies)
Discussion started by: Sharath Kumar
6 Replies

4. UNIX for Dummies Questions & Answers

How to tell if i am using DHCP or Static

Hey guys , YEs this is probably silly for most but i am new to this forum and solaris . i am curious to know if the ip address we have for our solaris server is static or dhcp . how can i tell ? will ifconfig -a tell me this ? or other commands? Thanks in advance (1 Reply)
Discussion started by: xdrivex
1 Replies

5. Red Hat

How to know whether my system is using DHCP or STATIC IP

Hi, I am using RHEL 5.1 and i would like to know, how to find the whether my system is using DHCP or STATIC IP with out looking at /etc/sysconfig/network-scripts/ifconfig-eth0 configuration file. Regards, Venkat (3 Replies)
Discussion started by: venkat55
3 Replies

6. IP Networking

Switching from DHCP to Static IP

I am trying to write a set of scripts for my Ubuntu 810 Server to allow a user to change from DHCP to a user-supplied Static IP, Subnet, Gateway and DNS Servers. So far I have the following, where $USERCHOICE is a user-entered value in each case: ifconfig eth0 down && ifconfig eth0 $USERCHOICE... (1 Reply)
Discussion started by: cleanden
1 Replies

7. IP Networking

How to configure DHCP to Static IP

I am pretty new to this. My router was earlier configured to enable DHCP, thus my UNIX box is using the dhcp address, i.e. I have to do a ifconfig dhcp hme0 start. Since I am planning to use my NT as a web server, I needed to use the static IP address. How do I configure the unix box to use the... (5 Replies)
Discussion started by: lee30320
5 Replies

8. IP Networking

dhcp and static ip conflicts.

I have a USB Wireless Adapter using the rum0 driver. All I want to do is set a perminent static IP for the onboard wired interface elxl0. I can plumb the wired interface up fine on the fly, but when I try to save the static IP over a reboot, I lose the IP address assigned to rum0 from my wireless... (1 Reply)
Discussion started by: ts97783
1 Replies

9. AIX

Static IP getting changed after 24 hours

Hi All, We have an AIX 5.3 server where I have set static IP but after every 24 hrs it is setting some other IP to this machine (I believe some DHCP process is running in the background every 24 hrs). I want to set the Static IP permanent to this machine, can some one help me where the... (10 Replies)
Discussion started by: sirasanibalaji
10 Replies

10. HP-UX

HP-UX 10.xx Changing from static IP to DHCP

***Newbie alert*** What's the easiest way to accomplish this? An admin left our company and I have taken over his HP Workstation and moved it to a different location that is on a different IP segment. I have performed a number of google searches but the steps I have followed haven't worked. ... (1 Reply)
Discussion started by: Steelysteel
1 Replies
Login or Register to Ask a Question