NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
WAX620 V10.8.13.2 generating apparently bogus auth messages
I'm seeing messages for the MAC address of a Tuya Smart device authenticating and deauthenticating repeatedly to one of my SSIDs. There is no such device in my house. Is this a neighbor's device or a bug, or combination of the two? I tried creating a MAC ACL for it, which didn't completely stop the auth messages -- the WAX620 still reported periodic auths along with block messages. I've changed the SSID password (WPA3/2) and turned off the four devices using that SSID, but the messages continue.
Below is a sample, the first form is seen every few seconds. No associated device ever makes a DHCPREQUEST.
May 13 14:21:16 hostapd: wifi0vap0: STA a8:80:55:3c:be:c5 IEEE 802.11: authenticated
May 13 03:45:52 hostapd: wifi0vap0: STA a8:80:55:3c:be:c5 IEEE 802.11: Station deauthenticated due to reason code 34
May 13 04:00:37 hostapd: wifi0vap2: STA a8:80:55:3c:be:c5 IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
2 Replies
BTW, also see log messages via syslog that say:
kernel: [180817.099242] ieee80211_send_deauth: [wifi0vap0]: Sending deauth to a8:80:55:3c:be:c5 with reason 2
which I believe means previous auth no longer valid.
This sequence of log entries suggests that MAC address filters are not always effective (this MAC is denied on all SSIDs):
May 15 16:42:08 kernel: [167212.376375] wifi0vap0: [a8:80:55:3c:be:c5] authentication disallowed by ACL
May 15 16:42:04 kernel: [167208.501885] wifi0vap2: [a8:80:55:3c:be:c5] authentication disallowed by ACL
May 15 16:42:04 kernel: [167208.499060] wifi0vap0: [a8:80:55:3c:be:c5] authentication disallowed by ACL
May 15 16:42:04 hostapd: wifi0vap2: STA a8:80:55:3c:be:c5 IEEE 802.11: authenticated
May 15 16:42:04 kernel: [167208.488041] wifi0vap0: [a8:80:55:3c:be:c5] authentication disallowed by ACL
May 15 16:42:00 kernel: [167204.607140] wifi0vap2: [a8:80:55:3c:be:c5] authentication disallowed by ACL
May 15 16:42:00 kernel: [167204.598455] wifi0vap0: [a8:80:55:3c:be:c5] authentication disallowed by ACL
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
