NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Satellite starts DoS Attack: ARP Attack when connected to Ethernet
Router Firmware Version
V2.1.4.16
Last night the internet access when down. After looking for a cause, I found that as soon as the satellite is conected to ethernet it starts an "ARP attack". Sample from the logs:
[DoS Attack: ARP Attack] from source: 192.168.1.6, Monday, August 06, 2018 14:49:41
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:41
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:40
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:40
[DoS Attack: ARP Attack] from source: 192.168.1.10, Monday, August 06, 2018 14:49:39
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:39
[DoS Attack: ARP Attack] from source: 192.168.1.10, Monday, August 06, 2018 14:49:38
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:37
[DoS Attack: ARP Attack] from source: 192.168.1.6, Monday, August 06, 2018 14:49:37
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:37
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:37
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:37
[DoS Attack: ARP Attack] from source: 192.168.1.6, Monday, August 06, 2018 14:49:36
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:36
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:35
[DoS Attack: ARP Attack] from source: 192.168.1.6, Monday, August 06, 2018 14:49:35
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:35
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:34
[DoS Attack: ARP Attack] from source: 192.168.1.10, Monday, August 06, 2018 14:49:34
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:34
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:33
[DoS Attack: ARP Attack] from source: 192.168.1.6, Monday, August 06, 2018 14:49:33
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:33
[DHCP IP: 192.168.1.10] to MAC address 00:d0:2d:5f:c2:53, Monday, August 06, 2018 14:49:32
And this crashes the internet connection.
I have tried to turn on/off, reset the satellite, but no avail. Currently I have the satellite unplug from ethernet.
- Unplugging the TPLink switches while connecting the satellites worked! After verifying the network was happy I plugged the switches back in and everything works.
Thanks for the help!
15 Replies
Hello Edgar_dc
I have sent you a PM.
DarrenM
I have the same issue. It's to the point where the router is not usable anymore. I connected an old router to get online but dont want to end up a $350 door stop.
Can you share what your recommendations are on this?
What FW is currently loaded?
What is the Mfr and model# of the IP modem the Orbi is connected too?
What is the size of your home? Sq Ft?
What is the distance between the router and satellite(s)? 30 feet is recommended in between them to begin with depending upon building materials.I would do a factory reset on the router and satellite and set up from scratch. Try disabling the following:
MIMO, Daisy Chain, Fast Roaming, IPv6 and Set 20/40Mhz Coexistence to 40Mhz only. Save settings and reboot the router and satellite(s). Turn OFF ALL other devices accept for 1 wired PC with the router. Walk thru the setup wizard. Skip adding the satellites during the wizard. After you set up the router and give a new SSID and PW and the router is rebooted. Go in and sync the router and 1 satellite first. You can do this in the same room with the router and satellites. After you get one synced, set an IP address reservation for the 1 satellite. Add, Save and Apply. Turn of the 1st satellite and turn on the 2nd satellite and get it connected. Do the same IP address reservation for the 2nd satellite. Add, Save and Apply. Turn off the satellite and then place each satellite in there remote locations.Check Connected devices after placing satellites. Check internet access. If good,
Begin to turn on the rest of the home devices.
What channels are you using? Auto? Try setting manual channel 1, 6 or 11 on 2.4Ghz and any unused channel on 5Ghz.
Any Wifi Neighbors near by? If so, how many?
zN wrote:
I have the same issue. It's to the point where the router is not usable anymore. I connected an old router to get online but dont want to end up a $350 door stop.
Can you share what your recommendations are on this?
**Update:
Updated to the new firmware V2.2.1.210 and it is working ok for a couple of days now. Also, after updating and testing them (Router and Sat), I plugged my NetGear ProSafe GS108E and disable IGMP on it (saw a recommendation on the thread). I also have a Disney Circle, Synology NAS, Xbox, etc.
We will see how it goes...
Hope it works better for you. :smileywink:
