Wireless: data from unknown device 00:00:21:FF:FF:FF, sent deauth
That message appears on my RB112 almost everyday and everytime I reboot the router, what the hell is it! My SSID is hidden so I don’t know if it’s a nearby AP trying to connect, but that’s all the message says… any ideas smart people?!
Wireless logs explanation is published here,
http://wiki.mikrotik.com/wiki/Wireless_Debug_Logs
Hi.
You can try magnetic isolation with some kind of alluminum watertight box.
Regards.
Is there any way to ban a certain MAC address from connecting to AP?
‘acccess-list’ is used to filter connected clients on AP, ‘default-authentication=no’ enable usage of ‘access-list’ to all connected clients.
using access-list to allow only thrusted MACs to join the AP does not avoid those “data from unknown” messages. Maybe its also possible to hack a radio driver and keep sending frames to actively attack your AP, that should show the same message in the log while your clients go mad. Ive seen someone else that said this is not possible, to send data to the AP even if the station has never associated, but Im not sure.
I see it all over on my ap’s.
Some are just laptops, trying to connect.
Some are wireless routers, and some are wireless ap in client mode, wich do not care about ssid, connect by mac, or others that connect by ssid, but try to connect the strongest signal they can get.
You should put it in access list, with deny, the log will be appearing, but that’s all.
Hi. I have the same problem on my RB411 in bridge mode working at 5GHz; in my case the 00:00:…:FF MAC address is the one of the other bridge.
Maybe some problems with radars?
The correct setting to manage radars is “radar-detect”?
Thanks.
Hi i’m getting the same.
It’s a configured WDS link between two radios. I’m think this might be something to do with some shitty OSPF issues I’m having.. now that I thought I was getting to the bottom of it… http://forum.mikrotik.com/t/ospf-issue-with-3-15-works-fine-with-3-13/24795/1
Anyways, now it appears as if it’s a wireless issue, could this be a faulty card? or board? I’ve replaced the card about 6 months ago.. but maybe it is still hardware related. Any thoughts?
Thanks 
00:20:91 is the Ethernet vendor code for NSA