Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor?

[Sevak Avakians]

Hmmm...do you have wep enabled?  If so, and no one else has it, then you're probably ok. Do you have a DHCP server that will show you which MAC addresses are logged on?  If you see that there's a sb product MAC address (00301A...etc.) but you cannot get into it with either airBridge simpleMonitor or airPoint simpleMonitor, then that's the spoofed MAC. On Fri, 2003-11-21 at 10:24, Wayland Sothcott wrote:  I was thinking that maybe someone had spoofed an airBridge MAC address and had got in. Then perhaps they spoofed the airPoint MAC address and everyone had lost association. I am not totally clear on this.   Other points to ponder. I updated 4 airBridges with 1.08 beta the day before it happened. I was running SimpleNMS both times. Nothing worked properly until I power cycled the airPoint. It's never done this before.   ----- Original Message ----- From: Sevak Avakians To: [EMAIL PROTECTED] Sent: Friday, November 21, 2003 2:40 PM Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor? I've also noticed that simpleNMS sometimes knocks off a few customers, but they come back on within a minute or two.  I try not to use it most of the time.  airBridge simpleMonitor works well, though, so I use that instead. I can't think of how it can be an attack... What kind of attack are you thinking it is, Wayland? Sevak On Fri, 2003-11-21 at 07:00, Wayland Sothcott wrote: Nightmare for all WISPs Whilst monitoring with Simple NMS all my clients dropped off. The bottom screen went red, except for my own locally connected airBridge. My airBridge kept associating and disassociating. The APPO has been working unattended for months. Now two days in a row it has broken at 11am whilst I have been monitoring with Simple NMS. The quick fix was to gain access to the building and power cycle the device from the mains plug. Could this be some sort of attack? Regards, Wayland. The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org