AA:AA:03:00:00:00 - strange log entr

RouterOS Wireless Networking
1

Sometimes when I kick connected client or when i disable and enable wlan ap/bridge interface I recive strange MAC log entry:



02:10:22 wireless,info xx: data from unknown device AA:AA:03:00:00:00, sent deauth
02:10:22 wireless,info xx: data from unknown device AA:AA:03:00:00:00, sent deauth
02:10:22 wireless,info xx: data from unknown device AA:AA:03:00:00:00, sent deauth
02:10:22 wireless,info xx: data from unknown device AA:AA:03:00:00:00, sent deauth
02:10:22 wireless,info xx: data from unknown device AA:AA:03:00:00:00, sent deauth


Any idea what is causing this?

2

Client sends data to AP, but client is not registred to access point anymore. Then you will get such log output.
Client should connect to access point again.

3

I’ve seen that mac adress as well.

4

sorry, that was me, I was testing your network security :slight_smile:

now what you need to figure out, is how I did it from the other side of the Atlantic!!

5

I have seen this same issue recently, I was using 2.9.38 when it started happening. I updated to 2.9.42 and it didn’t resolve the issue. I also tried 2.9.27 with the same results.

After a few hours, the deauths stopped rolling by in the log, and everybody reassociated. While the deauths were occuring only 4 of 34 stations could associate to the AP, even though the deauths were all for the same 1 or 2 mac addresses.

I think that this is either “the AP card went bad because it hung out on the tower for 2 years”, or the a CPE related issue.

All of the CPE we saw doing this were EZ3+ CPE’s that we bought from wisp-router.com

6

short or long preamble?