+ 0 Votes It sounds like NickNielsen Moderator 4 years ago Somebody built a VM and didn't bother (or didn't know how) to disable DHCP in the session.And why are you buying console cables from HP? If you have physical access to the switch, just use the appropriate cable for the console port: null modem or Cat 5 crossover. I've never seen an HP blade switch, but I've heard that for those you can break out your Blackberry or USB drive cable.etu + 0 Votes Rogue DHCP server black 4 years ago I didn't buy the cables - they gave them to me. They are not blade switches, they are ProCurves and it turns out that they use LapLink cables but they did not tell me that. I got into all the switches and extracted the ARP tables. There are no entries foe the IP or MAC addresses in question.Also the MAC address of the DHCP server keeps changing. I have isolated one server where when I unpluged the NIC I would get the proper IP range through DHCP, and when I plugged it back in I would get the 192.168.233.xxx IP. The server is Windows 2003 Standard without any Active Directory stuff installed and only Symantec Endpoint and HP ProCurve Manager installed. It has nor VMware stuff at all. Leaving it off, everything worked fine. AFter about 20 minutes the peoblem resurfaced with the same IP range. This morning at 6:30AM DHCP was working properly. AT 7:00AM I am getting the badIPs. During this time nobody else came into the office. I walked around and checked. However and engineer could have VPNed in and started a VM. I am next going to segment the network with dual homed computers running a Linus firewall passing everything but DHCP to try to track down where this VM or VMs are located. We have well over 500 of them. + 0 Votes Now THAT's weird NickNielsen Moderator 4 years ago The MAC is on the network, but it isn't in an ARP table? Unless I've totally misunderstood switching for the past 10 years, that's just not possible. If it's on the network, that MAC has gotta be in an ARP table somewhere.The only conclusion I can reach is there's a switch somewhere that you haven't found yet. That or you have multiple systems infected with some kind of server bot.Edit: You will probably get more (and better ) help over in the Questions forum. Click on the "Ask a Question" end of the Start a Discussion button and post all the information you've provided here. There are TR peers who hang around in the questions forum, waiting for an opportunity to answer somebody's question. Don't forget to reward the good answers by marking them helpful.