I am running ROS 5.11 and useing NV2. I keep seeing this in the hotspot. I have the MAC address limited to 1 mac. If I let if be unlimited it will just keep created new hotpot logins..
when I look at the address in the hotspot it is chaning to what ever public IP he is going to.. Its like the hotspot is leaking..
The CPE is a Mikrotik in routing mode to allow on 1 IP on the WAN side. All the CPEs are configured the same, yet only some have this problem,
And ideas?
~surfnet


10:38:27 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.79): logged in
10:38:28 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.79): logged out: host removed: limiting addresses per mac
10:38:28 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.91): trying to log in by mac
10:38:28 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.77): logged in
10:38:28 hotspot,info,debug 00:0C:42:68:9E:40 (192.168.108.114): logged out: host removed: limiting addresses per mac
10:38:28 hotspot,info,debug 00:0C:42:68:9E:40 (192.168.3.89): trying to log in by mac
10:38:28 hotspot,account,info,debug 00:0C:42:68:9E:40 (192.168.108.149): logged in
10:38:29 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.77): logged out: host removed: limiting addresses per mac
10:38:29 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.66): trying to log in by mac
10:38:29 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.77): logged in
10:38:29 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.77): logged out: host removed: limiting addresses per mac
10:38:29 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.66): trying to log in by mac
10:38:29 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.79): logged in
10:38:29 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.79): logged out: host removed: limiting addresses per mac
10:38:29 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.66): trying to log in by mac
10:38:29 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.150): logged in
10:38:29 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.150): logged out: host removed: limiting addresses per mac
10:38:29 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.66): trying to log in by mac
10:38:29 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.68): trying to log in by mac
10:38:29 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.151): login failed: host is removed
10:38:29 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.77): logged in
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.77): logged out: host removed: limiting addresses per mac
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.91): trying to log in by mac
10:38:30 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.152): logged in
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.152): logged out: host removed: limiting addresses per mac
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.66): trying to log in by mac
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.68): trying to log in by mac
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.79): login failed: host is removed
10:38:30 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.77): logged in
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.77): logged out: host removed: limiting addresses per mac
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.68): trying to log in by mac
10:38:30 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.153): logged in
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.153): logged out: host removed: limiting addresses per mac
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.68): trying to log in by mac
10:38:30 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.154): logged in
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.154): logged out: host removed: limiting addresses per mac
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.68): trying to log in by mac
10:38:30 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.155): logged in
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.155): logged out: host removed: limiting addresses per mac
10:38:30 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.68): trying to log in by mac
10:38:30 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.156): logged in
10:38:31 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.156): logged out: host removed: limiting addresses per mac
10:38:31 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.68): trying to log in by mac
10:38:31 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.157): logged in
10:38:31 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.157): logged out: host removed: limiting addresses per mac
10:38:31 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.68): trying to log in by mac
10:38:31 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.158): logged in
10:38:32 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.158): logged out: host removed: limiting addresses per mac
10:38:32 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.68): trying to log in by mac
10:38:32 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.159): logged in
10:38:32 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.159): logged out: host removed: limiting addresses per mac
10:38:32 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.68): trying to log in by mac
10:38:32 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.161): logged in
10:38:32 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.161): logged out: host removed: limiting addresses per mac
10:38:32 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.91): trying to log in by mac
10:38:32 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.162): logged in
10:38:32 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.162): logged out: host removed: limiting addresses per mac
10:38:32 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.66): trying to log in by mac
10:38:32 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.79): logged in
10:38:32 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.108.79): logged out: host removed: limiting addresses per mac
10:38:32 hotspot,info,debug 00:0C:42:64:B8:32 (192.168.3.91): trying to log in by mac
10:38:32 hotspot,account,info,debug 00:0C:42:64:B8:32 (192.168.108.77): logged in

Hi Ken, i hear that 5.11 version have some stability problems. What you think about downgrade to 5.10?

Yeah, another idea is to check your routing and firewall rules...

this is becoming more and more of a problem.
Here is the ARP logs.
this problem is happening in the hotspot, as you can see by the IP changing. The IP is not changing on the Client side
I have configured the cleint Mikrotik to a static IP address with a static route and static DNS

Look how many ARP values with different IPs there are

both cleint and AP are running 5.14

87 D 192.168.108.190 00:0C:42:39:0E:B5 Hotspot
88 D 192.168.108.52 00:0C:42:6A:62:94 Hotspot
89 D 192.168.108.103 00:0C:42:6A:6B:A5 Hotspot
90 D 192.168.108.108 00:0C:42:1F:3E:A0 Hotspot
91 D 192.168.108.180 00:0C:42:68:F3:4C Hotspot
92 D 192.168.108.94 00:0C:42:68:F3:4C Hotspot
93 D 192.168.108.100 00:0C:42:68:F3:4C Hotspot
94 D 192.168.108.160 00:0C:42:68:F3:4C Hotspot
95 D 192.168.108.86 00:0C:42:68:F3:4C Hotspot
96 D 192.168.108.96 00:0C:42:68:F3:4C Hotspot
97 D 192.168.108.117 00:0C:42:68:F3:4C Hotspot
98 D 192.168.108.131 00:0C:42:68:F3:4C Hotspot
99 D 192.168.108.151 00:0C:42:68:F3:4C Hotspot
100 D 192.168.108.155 00:0C:42:68:F3:4C Hotspot >
101 D 192.168.108.173 00:0C:42:68:F3:4C Hotspot >
102 D 192.168.108.175 00:0C:42:68:F3:4C Hotspot >
103 D 192.168.108.178 00:0C:42:68:F3:4C Hotspot >
104 D 192.168.108.185 00:0C:42:68:F3:4C Hotspot >
105 D 192.168.108.62 00:0C:42:68:F3:4C Hotspot >
106 D 192.168.108.56 00:0C:42:68:F3:4C Hotspot >
107 D 192.168.108.59 00:0C:42:68:F3:4C Hotspot >
108 D 192.168.108.157 00:0C:42:6A:6B:A5 Hotspot >
109 D 192.168.108.199 00:0C:42:68:F3:4C Hotspot >
110 D 192.168.108.90 00:0C:42:68:F3:4C Hotspot >
111 H 192.168.3.79 00:0C:42:68:F3:4C Hotspot >
112 D 192.168.108.54 00:0C:42:68:F3:4C Hotspot >
113 D 192.168.108.73 00:0C:42:68:F3:4C Hotspot >
114 D 192.168.108.74 00:0C:42:68:F3:4C Hotspot >
115 D 192.168.108.75 00:0C:42:68:F3:4C Hotspot >
116 D 169.254.1.20 00:1F:6A:00:13:66 ether3 >
117 D 192.168.108.79 00:0C:42:68:F3:4C Hotspot >
118 D 192.168.253.10 00:27:22:80:A0:49 ether2 >
119 D 192.168.250.1 00:15:6D:54:CC:CD wlan1 >

help

can anybody help? My clients are going crazy. Here are more logs. I dont understand how the hotspot keeps showing all these different IP addresses attached to the same MAC address. When I look in the CPE , I see only 1 DHCP address.
This is happening 6 times a second sometimes.. whatis happening?
Yesterday I installed a brand newMikrotik with ROS 5.14 and a new radio card.. same problem..

12:07:09 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.63): logged out: host removed: limiting addresses per mac
12:07:09 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.54): trying to log in by mac
12:07:09 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.62): logged in
12:07:25 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.62): logged out: host removed: limiting addresses per mac
12:07:25 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.74): trying to log in by mac
12:07:25 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.62): logged in
12:07:25 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.62): logged out: host removed: limiting addresses per mac
12:07:25 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.74): trying to log in by mac
12:07:25 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.63): logged in
12:08:00 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.63): logged out: host removed: limiting addresses per mac
12:08:00 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.74): trying to log in by mac
12:08:00 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.130): logged in
12:08:00 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.130): logged out: host removed: limiting addresses per mac
12:08:00 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.74): trying to log in by mac
12:08:00 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.131): logged in
12:08:03 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.131): logged out: host removed: limiting addresses per mac
12:08:03 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.54): trying to log in by mac
12:08:03 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.133): logged in
12:08:08 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.133): logged out: host removed: limiting addresses per mac
12:08:08 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.74): trying to log in by mac
12:08:09 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.79): trying to log in by mac
12:08:09 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.63): login failed: host is removed
12:08:09 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.62): logged in
12:08:09 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.62): logged out: host removed: limiting addresses per mac
12:08:09 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.54): trying to log in by mac
12:08:09 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.145): logged in
12:08:33 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.145): logged out: host removed: limiting addresses per mac
12:08:33 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.74): trying to log in by mac
12:08:33 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.63): logged in
12:08:33 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.63): logged out: host removed: limiting addresses per mac
12:08:33 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.74): trying to log in by mac
12:08:33 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.62): logged in
12:08:34 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.62): logged out: host removed: limiting addresses per mac
12:08:34 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.74): trying to log in by mac
12:08:34 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.146): logged in
12:08:34 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.146): logged out: host removed: limiting addresses per mac
12:08:34 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.74): trying to log in by mac
12:08:34 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.186): logged in
12:09:09 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.108.186): logged out: host removed: limiting addresses per mac
12:09:09 hotspot,info,debug 00:0C:42:6A:AA:F7 (192.168.3.74): trying to log in by mac
12:09:09 hotspot,account,info,debug 00:0C:42:6A:AA:F7 (192.168.108.187): logged in

so I found a way to prevent this problem but not fix it.
I setup my CPEs as routers and give out 192.168.250.x/24 on the ether1 interface.
I have a masquerade rule for the NAT on the CPE

the client has a netgear router plugged into the Mikrotik, and it gets an IP of 192.168.250.254

so when I torch the ether1 interface I should only see a source address of 192.168.250.254.

But I see source addresses of 192.168.1.x. This is the subnet that the netgear gives out.
I should NEVER see those should I? doesnt this mean the netgear is not doing its NAT correctly?

each time I saw a 192.168.1.x address appear in the torch, I saw the Hotpot authentication problem appear

but then.. I have a rule to masquerade 192.168.0.0/16 in the CPE.
Doesnt this mean that the CPE should NAT these packets from 192.168.1.x?

so what I did to prevent the problem was to add a IP Binding rule to block 192.168.1.0/24 in the AP. This stopped all the hotspot errors.. but to me , this is a band-aid on a bigger problem of NAT not working correctly on both the netgear and the mikrotik.

Hi

Same problem we are also facing only with mikrotik cpe , please help us..