Setup: Cable modem - RB2011-fibre-HP Procurve switch - end devices (printer, three AP’s, two laptops and some phones)
No VLAN’s or something strange. Three VPN’s, work fine.
Yesterday, “out of nothing” I saw a huge amount of multicast traffic coming FROM 239.2.0.252 towards an internal IP (that IP belongs to a NVR (network video recorder)) from Ubiquiti and two camera’s. That traffic kills completely the internet. Even when the NVR is physically switched OFF the traffic does not stop. Only after I switch off physically the cable, modem, then it stops.
Some can think: probable cause is the NVR + camera’s.
Today the same happened with a friend, which came with his Samsung A5, and automatically connected to the WiFi. And immediately 6-8 Mbps of multicast went towards the phone. Even when he left, and I removed the IP from the DHCP lease, the traffic did NOT stop. Again, only after reset of the cable modem it stopped.
What is here the problem? How can I prevent to happen again?
I already talked to Ubiquiti. That is a “normal” behaviour. The camera’s continue to send information, even when the NVR is switched off. Fine. I get that.
What about the mobile phone? So is sending multicast to the phone, and even when he left the network it continues…
I “solved” the problem. For some reason, the Ubiquiti NVR (network video recorder) was not responding to the camera’s, so the camera’s started to shout multcast…
I had to reset the NVR to factory settings, load the previous (stable) firmware, and then re adopted the camera’s again.