Possible Rogue MAC showing up on my IP scans - See attachmen

RouterOS General
1

Hello All,
I have a network running with a WiMax base station, just recently Ive found that my mikrotik is reporting this MAC address 00:1C:B0:B7:76:00 is consuming all addresses on my network. The addresses dont actually have anything on them but the mikrotik thinks they are there. If i ping the address nothing shows up.

What can I do about this??
How can I determine where this is coming from??
What can I do to restrict access from my network and have it stop reporting on my IP scans??


Thanks in advance for any input, Im freaked out at the moment.

Derrick
WTF_Rogue_MAC.jpg

2

00:1C:B0 is a Cisco prefix. What Cisco gear do you have around?

3

nothing

4

Do you have proxy-arp turned on anywhere, or the gateway setup to respond to those IPs? If you have a managed switch attached to that interface of the router, you can see what interface that MAC is attached to.

5

perhaps a customer has plugged into the wrong port on their router??