Hello,
I have the translation bridging feature enabled on our APs,
I have just noticed this odd entry in the Translation Table of one certain customer SM. I have not seen this on any others.
The first entry is a valid IP on our network. Any ideas what could be causing the other entries? The SM is connected to a standard consumer D-Link router with DHCP enabled to obtain the IP info.
In every other case that I look at the only entry is that of the IP that has been assigned to the router
Mac:001731C58D4B IpAddress:209.xxx.yyy.zzz Age:10
Mac:001731C58D4B IpAddress:201.164.144.41 Age:10
Mac:001731C58D4B IpAddress:72.246.43.27 Age:263
Mac:001731C58D4B IpAddress:61.145.123.141 Age:235
Mac:001731C58D4B IpAddress:125.89.77.215 Age:223
Mac:001731C58D4B IpAddress:174.129.209.132 Age:218
Mac:001731C58D4B IpAddress:116.31.20.101 Age:212
Mac:001731C58D4B IpAddress:72.241.199.201 Age:208
Mac:001731C58D4B IpAddress:219.85.176.63 Age:200
Mac:001731C58D4B IpAddress:218.6.9.112 Age:198
Thanks
The MAC is registered to ASUSTek computer - perhaps someone (or someone’s virus) is trying some IP spoofing.
Most routers have the ability to clone the MAC of the PC. This could be another reason why it appears to be from ASUStek.
I just noticed something else that I cannot replicate on other customers.
The customer’s router is set not to respond to pings
If I ping the address 209.xxx.yyy.zzz (given by our DHCP server) from the same subnet or from an external address out on the Internet, the Age value for the above IP is reset to 0. I would expect to see this. However the IP from which I initiated the ping is also now displayed in the Translation Table.
Trying this ping test with others does not give the same results. In those cases the only IP in the list is that assigned to the router.