NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

star0815's avatar
star0815
Aspirant
May 31, 2018
Solved

WAC510 sends packets to Port UDP 7788

Hi comminuty, just discovered that my WAC510s are sending to 192.168.1.1:7788 UDP via eth0. Port 7788 is not authorized to be used by IANA.   Can anyone please clarify?   Firmware V4.0.7....
Security
Troubleshooting
star0815's avatar
star0815
Aspirant
Jun 05, 2018

Hi DaneA,

 

have upgraded to latest firmware and performed a factory reset afterwards, then configured only neccesary settings (IP, password).

While no SSID is configured (or Day Zero configured one) no packets (7788/udp) are send out over eth0.

Packets are only sent when there is a configured SSID and clients are connected.

Will try some SSID-specific settings, but this config is used so far (default settings omitted):

 

IP LAN static (IP, Subnet, Gateway, DNS1+2)

NTP client=on, custom NTP server by hostname (and it is reachable)

Management mode=local (standalone)

UPnP=off

SSID "Guest":

Client Isolation=on

Band Steering=on

VLAN ID=99

802.11w (PMF)=on

 

One more thing: device is trying to query public NTP servers regardless of setting "use custom NTP server".

 

Best regards.

RaghuHR's avatar
RaghuHR
NETGEAR Expert
Jun 05, 2018

Hi star0815

 

Please download detailed logs from monitoring page and send it. BTW - Are there any chance that those wireless clients are used for any online gaming? Basically I would like to know what kind of traffic going?

 

Thanks,

Raghu

  • star0815's avatar
    star0815
    Aspirant
    Jun 05, 2018

    Hi RaghuHR,

     

    The devices are used in office environment, but is an public Wifi also. Android traffic to Internet is mostly seen.

    I will send pcap also as private message.

     

    Thanks and best regards!

     

     

  • star0815's avatar
    star0815
    Aspirant
    Jun 05, 2018

    After some tests it looks like udp/7788 packets are only sent when there are two SSIDs configured. After removing second SSID there are no more packets in pcap. Also tried to have different configurations of first/second SSID.

     

    So the config I just sent might not reproduce that behavior, just add a second SSID.

     

    I have also seen my custom NTP server is not responding to device, so querying other NTP servers should be OK despite "use custom NTP server" is checked?

     

    Thanks a lot!

     

    Edit: Just verified, when adding a second SSID (all default values) it starts to send udp/7788 packets.

    • RaghuHR's avatar
      RaghuHR
      NETGEAR Expert
      Jun 14, 2018

      Hi star0815

       

      We have identifed the root cause and will be fixing this in our upcoming releases.

       

      Thanks,

      Raghu

      • star0815's avatar
        star0815
        Aspirant
        Jun 14, 2018

        Hi RaghuHR,

         

        glad you found the issue.

         

        Many thanks and best regards!

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More