Here is what we are seeing on the LAN interface of the ePMP radio when this happened this morning. There were a few more but pulled just the ones "close" to the actual TIK MAC. First entry is the ACTUAL mikrotik MAC address:
744D285DB148 744D285DB158 744D3855B148 744D995DB148 744D285DB118 744D285DB448 744D2852B148 744D285DB188 744D285BB148 744D245DB148 744D885DB148 744F285DB148 740D285DB148 74CC285DB148 741D285DB148 744B285DB148 748D285DB148 74DD285DB148 7447285DB148 744D285DB148 744D225DB148 744D285DB548 744D285DB144 744D285DD148 744D285DB14B 744D289DB148 744D285FB148 744D285DBF48 -- Larry Smith lesm...@ecsis.net On Tue March 9 2021 15:22, Adam Moffett wrote: > The part messing with my head is that they're variations of the Mikrotik > MAC, and not the actual MAC of the interface. When it had 94 IP's did > it come up with 94 unique MAC addresses? > > On 3/9/2021 3:07 PM, Josh Luthman wrote: > > Really sounds like the hotspot package. > > > > Maybe proxy arp. > > > > Josh Luthman > > 24/7 Help Desk: 937-552-2340 > > Direct: 937-552-2343 > > 1100 Wayne St > > Suite 1337 > > Troy, OH 45373 > > > > > > On Tue, Mar 9, 2021 at 3:01 PM Larry Smith <lesm...@ecsis.net > > <mailto:lesm...@ecsis.net>> wrote: > > > > > > Ok, have a strange situation that has repeated itself > > and I can come up with no answer. Customer behind > > an ePMP 1000, mikrotik HAP 52. Suddenly last night > > the ePMP radio went from 1 LAN MAC (the tik) to 43 > > (forthy-three) MACs, most of them a variation of the > > actual MAC of the TIK. At this time the TIK started > > grabbing (using) a swath of different IP, all part of > > our network (both public and private) but some of > > them not part of our wireless network. > > (EG the 100, 101, 102.X nets are part of our wireless > > but the 118.x network is not) > > > > Suspend ethernet on radio, wait 5, unsuspend and > > login to TIK, reboot, reboot radio. all normal again. > > (cannot get into tik without doing this). > > > > This happended to the same customer, on different > > private (radio) and public (tik) IP address in April 2020 > > at which time the radio had 94 MAC address on the LAN > > interface. At that time we installed a new ePMP and went > > from a 952 tik to the HAP 52 thinking one of them was the > > issue. > > > > Thoughts ? Suggestions we can look at ? > > > > PS: this customer is computer illerate and generally does > > exactly what the tech says to do and there is no other > > internet service at this location. > > > > -- > > Larry Smith > > lesm...@ecsis.net <mailto:lesm...@ecsis.net> > > > > -- > > AF mailing list > > AF@af.afmug.com <mailto:AF@af.afmug.com> > > http://af.afmug.com/mailman/listinfo/af_af.afmug.com > > <http://af.afmug.com/mailman/listinfo/af_af.afmug.com> -- AF mailing list AF@af.afmug.com http://af.afmug.com/mailman/listinfo/af_af.afmug.com