Hello,
I have a RB433 running firmware 5.26. The main internet or WAN interface is eth1. I have an R52hn wireless adapter with a wlan1 is setup with PSK and a virtual ap wlan2 setup with PSK. Randomly a problem occurs on this RB that causes stations connected to this AP to lose internet connection even thou the internet connection on eth1 never goes down. This happens on both wlan1 and wlan2 THe logs show this.
12:43:39 wireless,info wlan1: data from unknown device 2C:B4:3A:80:53:91, sent dea
uth
12:43:40 wireless,info wlan1: data from unknown device 2C:B4:3A:80:53:91, sent dea
uth
12:43:40 wireless,info wlan1: data from unknown device 2C:B4:3A:80:53:91, sent dea
uth
12:43:40 wireless,info wlan1: data from unknown device 2C:B4:3A:80:53:91, sent dea
uth
The unknown device MAC is not always this MAC, other MAC's also appear in the logs. I am not at the location to run a spectrum analyzer to see if there is interference from another device. I have rebooted the RB433 and the same logs appear shortly thereafter. Could this be a problem with the R52hn card? Any help would be greatly appreciated.
-
-
samsung172
Forum Guru
- Posts: 1193
- Joined:
- Location: Østfold - Norway
- Contact:
Re: data from unknown device
<DEV>: data from unknown device <MAC>, sent deauth [(XXX events suppressed, YYY deauths suppressed)]
Data frame from unknown device (read - not registered to this AP) with mac address <MAC> received, AP sent deauthentication frame to it (as per 802.11). XXX is number of events that are not logged so that the log does not become too large (logs are limited to 1 entry per 5s after first 5 entries), YYY is the number of deauthentication frames that should have been sent, but were not sent, so that resources are not wasted sending too many deauthentication frames (only 10 deauth frames per second are allowed).
The likely cause of such a message is that the Station previously connected to the AP, which does not yet know it has been dropped from AP registration table, sending data to AP. Deauthentication message tells the Station that it is no longer connected.
Data frame from unknown device (read - not registered to this AP) with mac address <MAC> received, AP sent deauthentication frame to it (as per 802.11). XXX is number of events that are not logged so that the log does not become too large (logs are limited to 1 entry per 5s after first 5 entries), YYY is the number of deauthentication frames that should have been sent, but were not sent, so that resources are not wasted sending too many deauthentication frames (only 10 deauth frames per second are allowed).
The likely cause of such a message is that the Station previously connected to the AP, which does not yet know it has been dropped from AP registration table, sending data to AP. Deauthentication message tells the Station that it is no longer connected.