DHCP Oddness

Something strange seems to be going on with my DHCP server. I haven’t changed any settings on it (RB433Ah 4.6) since I installed it new 4 months ago. Can anyone help with these problems?

  1. Up to 60+ I.P. addresses for one client:
    I have a public network where users connect and login through the Hotspot’s login page. An unknown client accessed an AP in a residential area recently and was assigned 69 I.P. addresses, see picture.

  2. DHCP stops working:
    4.5 months ago. DCHP stops assigning new addresses and renewing leases, causing everyone to eventually get logged out. Reboot solves the problem. This has happened three times since I installed the 433AH

Many thanks,

Gareth

It shouldn’t issue that many ips to one mac by default. Check “/ip hotspot print detail” and see what “addresses-per-mac” entry is. Should be two.

BTW, that is the same result when a router with clients is connected to the hotspot also.

More importantly, those are multicast IP addresses.

As far as the DHCP server bombing out - impossible to troubleshoot after the fact, that would be just guesswork. When a process crashes take a supout.rif and send it to support@mikrotik.com.

I’m not sure what ‘addresses-per-mac’ is set at, as ‘/ip hotspot print detail’ gives me this.

Flags: X - disabled, I - invalid, S - HTTPS 
 0   name="hotspot1" interface=bridge1 address-pool=hs-pool-2 profile=hsprof1 
     idle-timeout=1d keepalive-timeout=none proxy-status="running"

I have a few routers with clients on the network, but none of them have more than 3 clients. I had this problem when I set up an AP at a client’s house once. He had three computers connected to the AP via a switch and was quickly assigned about 80 IPs (This was without any wireless clients being associated) . I changed the AP to ‘station’ mode and the problem went away.

I can’t fix the current problem like that though, because this MAC does not belong to any of my clients and I don’t know who it is. Could a virus / worm on a client’s computer be causing this?