Here is what we are seeing on the LAN interface
of the ePMP radio when this happened this morning.
There were a few more but pulled just the ones 
"close" to the actual TIK MAC.  First entry is
the ACTUAL mikrotik MAC address:

744D285DB148
744D285DB158
744D3855B148
744D995DB148
744D285DB118
744D285DB448
744D2852B148
744D285DB188
744D285BB148
744D245DB148
744D885DB148
744F285DB148
740D285DB148
74CC285DB148
741D285DB148
744B285DB148
748D285DB148
74DD285DB148
7447285DB148
744D285DB148
744D225DB148
744D285DB548
744D285DB144
744D285DD148
744D285DB14B
744D289DB148
744D285FB148
744D285DBF48

-- 
Larry Smith
lesm...@ecsis.net

On Tue March 9 2021 15:22, Adam Moffett wrote:
> The part messing with my head is that they're variations of the Mikrotik
> MAC, and not the actual MAC of the interface.  When it had 94 IP's did
> it come up with 94 unique MAC addresses?
>
> On 3/9/2021 3:07 PM, Josh Luthman wrote:
> > Really sounds like the hotspot package.
> >
> > Maybe proxy arp.
> >
> > Josh Luthman
> > 24/7 Help Desk: 937-552-2340
> > Direct: 937-552-2343
> > 1100 Wayne St
> > Suite 1337
> > Troy, OH 45373
> >
> >
> > On Tue, Mar 9, 2021 at 3:01 PM Larry Smith <lesm...@ecsis.net
> > <mailto:lesm...@ecsis.net>> wrote:
> >
> >
> >     Ok, have a strange situation that has repeated itself
> >     and I can come up with no answer.  Customer behind
> >     an ePMP 1000, mikrotik HAP 52.  Suddenly last night
> >     the ePMP radio went from 1 LAN MAC (the tik) to 43
> >     (forthy-three) MACs, most of them a variation of the
> >     actual MAC of the TIK.  At this time the TIK started
> >     grabbing (using) a swath of different IP, all part of
> >     our network (both public and private) but some of
> >     them not part of our wireless network.
> >     (EG the 100, 101, 102.X nets are part of our wireless
> >     but the 118.x network is not)
> >
> >     Suspend ethernet on radio, wait 5, unsuspend and
> >     login to TIK, reboot, reboot radio.  all normal again.
> >     (cannot get into tik without doing this).
> >
> >     This happended to the same customer, on different
> >     private (radio) and public (tik) IP address in April 2020
> >     at which time the radio had 94 MAC address on the LAN
> >     interface.  At that time we installed a new ePMP and went
> >     from a 952 tik to the HAP 52 thinking one of them was the
> >     issue.
> >
> >     Thoughts ?  Suggestions we can look at ?
> >
> >     PS:  this customer is computer illerate and generally does
> >     exactly what the tech says to do and there is no other
> >     internet service at this location.
> >
> >     --
> >     Larry Smith
> >     lesm...@ecsis.net <mailto:lesm...@ecsis.net>
> >
> >     --
> >     AF mailing list
> >     AF@af.afmug.com <mailto:AF@af.afmug.com>
> >     http://af.afmug.com/mailman/listinfo/af_af.afmug.com
> >     <http://af.afmug.com/mailman/listinfo/af_af.afmug.com>

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Reply via email to