Event ID 14188 Message Occurs If the Network Configuration Changed Alert Is Turned On (323784)

SUMMARY

If you are using a server that is running Microsoft Windows 2000 Server that is also running Internet Security and Acceleration (ISA) Server 2000, if this server has one or more network interfaces that are configured to use Dynamic Host Configuration Protocol (DHCP) to obtain an address, the following informational event message may be logged in the application event log if the Network Configuration Changed alert in ISA Server is turned on.

Source: Microsoft ISA Server
Type: Information
Event ID: 14188
Description:
ISA Server detected a change in the IP routing table of the computer.

This event message is logged even when the DHCP address that is obtained from the DHCP server is the same as the Internet Protocol (IP) address for the interface that was previously assigned by the DHCP server.

MORE INFORMATION

On a server that is running ISA Server 2000, ISA Server monitors all IP interfaces on the server for changes in the IP routing table that may prevent ISA Server from routing IP traffic correctly. If the server that is running ISA Server has a DHCP interface, this interface must renew its IP lease based on the lease duration that is assigned by the DHCP server. After the interface renews its lease, the routing table is updated automatically even if the interface obtains the same IP address it had used previously. This behavior triggers the Network Configuration Changed alert if this alert is turned on (by default, this alert is turned off in ISA Server), and it may cause the event ID 14188 message to be logged in the application event log and initiate other actions that are configured for this alert.

If the Routing and Remote Access Service (RRAS) is installed as a dial-up or VPN server on the ISA Server, RRAS client connection events will trigger this alert. RRAS changes the Windows routing table to accommodate each client. In this scenario, Microsoft recommends that you leave the "Network Configuration Changed" alert disabled (the default).
To turn on the Network Configuration Changed alert in ISA Server and to configure the alert to write an event in the application event log when it is triggered:

Start ISA Server Microsoft Management Console (MMC).
Expand Servers and Arrays, expand the server, and then expand Monitoring Configuration.
Click Alerts, and then double click Network Configuration Changed.
On the General tab, click to select the Enable check box.
Click OK.

By default, when you turn on this alert, an event is logged to the application event log on the server. You can configure other actions as appropriate before you click OK.

NOTE: To turn off the Network Configuration Changed alert, click to clear the Enable check box.

If an event ID 14188 message is logged in the application event log, view the DHCP lease time to see if it coincides with the time of the alert. To do so:

Open a command prompt on the server that is running ISA Server.
Type ipconfig /all.
Review the Lease Obtained time for all DHCP-enabled adapters.

Compare the Lease Obtained time to the time that the event ID 14188 message was logged. If these times are the same, you can safely ignore this event ID message.