Community discussions

MikroTik App
 
wifipn
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 56
Joined: Sun Jul 23, 2006 5:01 am

Wireless Data from unknown device x10000

Wed Feb 14, 2007 12:52 am

Wireless: data from unknown device 00:00:21:FF:FF:FF, sent deauth


That message appears on my RB112 almost everyday and everytime I reboot the router, what the hell is it! My SSID is hidden so I don't know if it's a nearby AP trying to connect, but that's all the message says... any ideas smart people?!
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6624
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Wed Feb 14, 2007 8:23 am

Wireless logs explanation is published here,
http://wiki.mikrotik.com/wiki/Wireless_Debug_Logs
 
User avatar
ivaring
Frequent Visitor
Frequent Visitor
Posts: 92
Joined: Sun Dec 24, 2006 3:25 pm
Contact:

Fri Feb 16, 2007 10:52 am

Hi.
You can try magnetic isolation with some kind of alluminum watertight box.

Regards.
 
wifipn
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 56
Joined: Sun Jul 23, 2006 5:01 am

Fri Feb 16, 2007 12:52 pm

Is there any way to ban a certain MAC address from connecting to AP?
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6624
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Fri Feb 16, 2007 2:52 pm

'acccess-list' is used to filter connected clients on AP, 'default-authentication=no' enable usage of 'access-list' to all connected clients.
 
Ozelo
Member
Member
Posts: 338
Joined: Fri Jun 02, 2006 3:56 am

Tue Apr 10, 2007 1:52 pm

using access-list to allow only thrusted MACs to join the AP does not avoid those "data from unknown" messages. Maybe its also possible to hack a radio driver and keep sending frames to actively attack your AP, that should show the same message in the log while your clients go mad. Ive seen someone else that said this is not possible, to send data to the AP even if the station has never associated, but Im not sure.
MTCRE - 1104RE006
MTCINE - 1104INE001
 
User avatar
jorj
Member
Member
Posts: 398
Joined: Mon Mar 12, 2007 4:34 pm
Location: /dev/null

Thu Apr 12, 2007 9:23 am

I see it all over on my ap's.
Some are just laptops, trying to connect.
Some are wireless routers, and some are wireless ap in client mode, wich do not care about ssid, connect by mac, or others that connect by ssid, but try to connect the strongest signal they can get.
You should put it in access list, with deny, the log will be appearing, but that's all.
 
el berto
Member Candidate
Member Candidate
Posts: 211
Joined: Wed Sep 26, 2007 10:53 am

Re: Wireless Data from unknown device x10000

Mon Jun 30, 2008 10:55 am

Hi. I have the same problem on my RB411 in bridge mode working at 5GHz; in my case the 00:00:...:FF MAC address is the one of the other bridge.
Maybe some problems with radars?
The correct setting to manage radars is "radar-detect"?
Thanks.
 
User avatar
chimaster
Member Candidate
Member Candidate
Posts: 132
Joined: Tue Feb 07, 2006 8:54 am
Location: Queenstown
Contact:

Re: Wireless Data from unknown device x10000

Mon Feb 23, 2009 5:03 pm

Hi i'm getting the same.

It's a configured WDS link between two radios. I'm think this might be something to do with some shitty OSPF issues I'm having.. now that I thought I was getting to the bottom of it... http://forum.mikrotik.com/viewtopic.php?f=2&t=27952

Anyways, now it appears as if it's a wireless issue, could this be a faulty card? or board? I've replaced the card about 6 months ago.. but maybe it is still hardware related. Any thoughts?

Thanks :-)
 
Ztheir
just joined
Posts: 1
Joined: Sun Oct 17, 2010 12:59 am

Re: Wireless Data from unknown device x10000

Sun Oct 17, 2010 1:03 am

00:20:91 is the Ethernet vendor code for NSA

http://hwaddress.com/mac/002091-000000.html

Who is online

Users browsing this forum: necropastor and 19 guests