Where is this 169.254 IP coming from?

RouterOS Forwarding Protocols
1

Hello,

I have enabled PIM between two vlans that both have their IP address.
Now log show:

RX IGMP_V2_MEMBERSHIP_REPORT from 169.254.134.72 to 239.255.255.250 on vif vlan100-management: source must be directly connected

Where could this link-local address be coming from?

Thanks

2

It is Microsoft!!!
Just google for it :slight_smile:

RFC 3927
Automatic Private Internet Protocol Addressing (APIPA)
or simply 169.254.0.0/16

3

Hello,

I know what these kind of addresses are. I am just wondering what device/interface is using it.
Cause Mikrotik can’t ping it.

I don’t have a single machine running Windows in my LAN.

Thank you

4

Of course you can’t ping it because your router most likely doesn’t have an address in that space on the client-facing interface :wink:
APIPA is not only Microsoft but also Macs and literally any OS uses it. It happens when an interface is configured as DHCP client and doesn’t get a lease.

The Multicast you’re seeing is most likely mDNS.
You should be able to see the the MAC address of that device in your ARP table.
Or create a filter rule with src-address=169.254.0.0/16 and action=log - this will show the mac address in your log. Having the MAC address will help you finding out which machine is misbahiving.
Or - give your router an address in that space and try to connect to this machine to find out which it is.

-Chris

5

Hello cdiedrich,

Thank you for your message.

Before reading your answer, I tried using packet sniffer to find out the guilty machine but it did not shed a light.
Adding a filter rule as you mentioned it doesn’t help either - counter don’t increment.

Cheers