[cybertooth]

Kind of a weird issue here:

Customer has SBS 2008 Standard successfully deployed. Server was just rebuilt from scratch April 2012.

10 Desktops/1 laptop/1 iphone/1 Droid
Cisco RVS4000 Router
SBS server
Dlink AP3200 Access Point

Since I deployed this unit, a strange problem has been present.
-When a domain-joined device accesses the wireless, all is peachy.
-When a non-domain device access the wireless, it cannot get an IP.

BUT

When I disable the Windows Firewall, all is well and IP's are given to all.

Port 67/68 is authorized and configured for use by default and hasn't been messed with.

Here is a snippet of the windows firewall log of a cellphone trying to get an IP:

#Version: 1.5
#Software: Microsoft Windows Firewall
#Time Format: Local
#Fields: date time action protocol src-ip dst-ip src-port dst-port size tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info path

2012-05-03 11:23:31 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:23:36 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:23:43 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:23:45 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:23:46 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:23:53 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:23:54 DROP TCP 192.168.0.3 192.168.0.3 13045 389 40 FA 1936839423 2892249727 29 - - - RECEIVE
2012-05-03 11:23:54 DROP TCP 192.168.0.3 192.168.0.3 389 13045 40 R 2892249727 2892249727 0 - - - RECEIVE
2012-05-03 11:24:02 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:24:09 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:24:13 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:24:19 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:24:22 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:24:30 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:29:44 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:29:48 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:29:49 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:29:56 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:30:05 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:30:07 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:30:12 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:30:13 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:30:16 DROP UDP 0.0.0.0 255.255.255.255 68 67 336 - - - - - - - RECEIVE
2012-05-03 11:30:17 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:30:20 DROP UDP 0.0.0.0 255.255.255.255 68 67 336 - - - - - - - RECEIVE
2012-05-03 11:30:24 DROP UDP 0.0.0.0 255.255.255.255 68 67 336 - - - - - - - RECEIVE
2012-05-03 11:30:24 DROP TCP 192.168.0.3 192.168.0.3 13003 389 40 FA 139761465 3483586016 32 - - - RECEIVE
2012-05-03 11:30:24 DROP TCP 192.168.0.3 192.168.0.3 389 13003 40 R 3483586016 3483586016 0 - - - RECEIVE
2012-05-03 11:30:26 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:30:42 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:35:30 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:35:32 DROP UDP 0.0.0.0 255.255.255.255 68 67 336 - - - - - - - RECEIVE
2012-05-03 11:35:35 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:35:37 DROP UDP 0.0.0.0 255.255.255.255 68 67 336 - - - - - - - RECEIVE
2012-05-03 11:35:43 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE
2012-05-03 11:36:00 DROP UDP 0.0.0.0 255.255.255.255 68 67 328 - - - - - - - RECEIVE


I was guessing it could be NAP related, but the whole "turn the firewall off and all is well" is really throwing me for a loop.

Any ideas guys? Its gotta be something SIMPLE!

Thanks for your advice in advance!

[teiger]

Sorry, I am not really helping you here, but I would say that what you have is a desirable feature that we would all like to implement. I mean, all of us keep trying to figure a way from giving out an IP to very iPhone/Galaxy that enters the building.

[cybertooth]

Honestly, they wouldn't get an IP unless they properly authenticate with WPA password so I'm not to worried about that.

It is just so strange that we take down the server firewall and all is well so I know it needs a setting adjustment somewhere.

Could it be something with allowing anonymous access to the server?