NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Insight app log info shows seemingly random devices connecting and disconnecting
Hi all. We have two WAX610 access points managed with the insight app. The log shows seemingly random devices connecting, disconnecting, unable to obtain IP addresses, and failing to authenticate. All of the devices that are connected are working correctly. Is there a way to supress this info or is there an issue that needs to be addressed? See example below.
| Alarm Type | Source | SerialNo | Description | Alarm Time |
| INFO | DEVICE | ********** | 4C-77-CB-F5-10-13 wireless client connected | SATURDAY NOVEMBER 6 08:40:53 AM America/Chicago |
| INFO | DEVICE | ********** | Client A0-6A-44-6E-1D-B3 could not obtain IP address | SATURDAY NOVEMBER 6 01:56:56 AM America/Chicago |
| INFO | DEVICE | ********** | A0-6A-44-6E-1D-B3 wireless client connected | SATURDAY NOVEMBER 6 01:56:56 AM America/Chicago |
| INFO | DEVICE | ********** | A0-6A-44-6E-1D-B3 wireless client disconnected | SATURDAY NOVEMBER 6 01:56:56 AM America/Chicago |
| INFO | DEVICE | ********** | 38-4B-76-08-2E-43 wireless client connected | SATURDAY NOVEMBER 6 12:47:20 AM America/Chicago |
| INFO | DEVICE | ********** | CE-E6-FE-20-86-09 wireless client disconnected | FRIDAY NOVEMBER 5 07:04:26 PM America/Chicago |
| INFO | DEVICE | ********** | 66-01-34-AF-17-98 wireless client disconnected | FRIDAY NOVEMBER 5 06:57:22 PM America/Chicago |
| INFO | DEVICE | ********** | Client CE-E6-FE-20-86-09 could not obtain IP address | FRIDAY NOVEMBER 5 06:57:22 PM America/Chicago |
| INFO | DEVICE | ********** | 62-5C-8D-15-B6-8A wireless client disconnected | FRIDAY NOVEMBER 5 06:57:22 PM America/Chicago |
| INFO | DEVICE | ********** | CE-E6-FE-20-86-09 wireless client disconnected | FRIDAY NOVEMBER 5 06:57:22 PM America/Chicago |
| INFO | DEVICE | ********** | 66-01-34-AF-17-98 wireless client disconnected | FRIDAY NOVEMBER 5 06:55:20 PM America/Chicago |
| INFO | DEVICE | ********** | Client 5E-98-20-13-77-B9 could not obtain IP address | FRIDAY NOVEMBER 5 06:43:46 PM America/Chicago |
| INFO | DEVICE | ********** | Client 5E-98-20-13-77-B9 could not obtain IP address | FRIDAY NOVEMBER 5 06:42:46 PM America/Chicago |
| INFO | DEVICE | ********** | BA-FB-AB-39-B7-6E wireless client connected | FRIDAY NOVEMBER 5 06:42:46 PM America/Chicago |
| INFO | DEVICE | ********** | 5E-98-20-13-77-B9 wireless client disconnected | FRIDAY NOVEMBER 5 06:42:46 PM America/Chicago |
| INFO | DEVICE | ********** | BA-FB-AB-39-B7-6E wireless client disconnected | FRIDAY NOVEMBER 5 06:42:46 PM America/Chicago |
| INFO | DEVICE | ********** | 5E-98-20-13-77-B9 wireless client connected | FRIDAY NOVEMBER 5 06:12:35 PM America/Chicago |
| INFO | DEVICE | ********** | Client 5E-98-20-13-77-B9 could not obtain IP address | FRIDAY NOVEMBER 5 06:12:35 PM America/Chicago |
| INFO | DEVICE | ********** | client 5E-98-20-13-77-B9 authentication failed | FRIDAY NOVEMBER 5 06:12:35 PM America/Chicago |
| INFO | DEVICE | ********** | BA-FB-AB-39-B7-6E wireless client connected | FRIDAY NOVEMBER 5 06:12:35 PM America/Chicago |
| INFO | DEVICE | ********** | BA-FB-AB-39-B7-6E wireless client disconnected | FRIDAY NOVEMBER 5 06:12:35 PM America/Chicago |
| INFO | DEVICE | ********** | 5E-98-20-13-77-B9 wireless client disconnected | FRIDAY NOVEMBER 5 06:12:35 PM America/Chicago |
| INFO | DEVICE | ********** | 62-5C-8D-15-B6-8A wireless client disconnected | FRIDAY NOVEMBER 5 06:10:05 PM America/Chicago |
| INFO | DEVICE | ********** | EE-A0-42-F1-1F-50 wireless client disconnected | FRIDAY NOVEMBER 5 05:54:27 PM America/Chicago |
| INFO | DEVICE | ********** | Client EE-A0-42-F1-1F-50 could not obtain IP address | FRIDAY NOVEMBER 5 05:54:27 PM America/Chicago |
| INFO | DEVICE | ********** | Client EE-A0-42-F1-1F-50 could not obtain IP address | FRIDAY NOVEMBER 5 05:49:58 PM America/Chicago |
| INFO | DEVICE | ********** | EE-A0-42-F1-1F-50 wireless client disconnected | FRIDAY NOVEMBER 5 05:49:58 PM America/Chicago |
| INFO | DEVICE | ********** | 66-01-34-AF-17-98 wireless client disconnected | FRIDAY NOVEMBER 5 05:45:56 PM America/Chicago |
| INFO | DEVICE | ********** | BA-FB-AB-39-B7-6E wireless client connected | FRIDAY NOVEMBER 5 05:43:55 PM America/Chicago |
| INFO | DEVICE | ********** | 5E-98-20-13-77-B9 wireless client connected | FRIDAY NOVEMBER 5 05:43:02 PM America/Chicago |
| INFO | DEVICE | ********** | client BA-FB-AB-39-B7-6E authentication failed | FRIDAY NOVEMBER 5 05:42:22 PM America/Chicago |
| INFO | DEVICE | ********** | 5E-98-20-13-77-B9 wireless client disconnected | FRIDAY NOVEMBER 5 05:42:22 PM America/Chicago |
| INFO | DEVICE | ********** | BA-FB-AB-39-B7-6E wireless client disconnected | FRIDAY NOVEMBER 5 05:42:22 PM America/Chicago |
| INFO | DEVICE | ********** | Client 5E-98-20-13-77-B9 could not obtain IP address | FRIDAY NOVEMBER 5 05:42:22 PM America/Chicago |
| INFO | DEVICE | ********** | Client BA-FB-AB-39-B7-6E could not obtain IP address | FRIDAY NOVEMBER 5 05:42:22 PM America/Chicago |
| INFO | DEVICE | ********** | BA-FB-AB-39-B7-6E wireless client connected | FRIDAY NOVEMBER 5 05:16:06 PM America/Chicago |
| INFO | DEVICE | ********** | 5E-98-20-13-77-B9 wireless client connected | FRIDAY NOVEMBER 5 05:12:34 PM America/Chicago |
| INFO | DEVICE | ********** | Client 5E-98-20-13-77-B9 could not obtain IP address | FRIDAY NOVEMBER 5 05:12:34 PM America/Chicago |
| INFO | DEVICE | ********** | 5E-98-20-13-77-B9 wireless client disconnected | FRIDAY NOVEMBER 5 05:12:34 PM America/Chicago |
| INFO | DEVICE | ********** | Client 62-5C-8D-15-B6-8A could not obtain IP address | FRIDAY NOVEMBER 5 05:10:03 PM America/Chicago |
| INFO | DEVICE | ********** | 62-5C-8D-15-B6-8A wireless client disconnected | FRIDAY NOVEMBER 5 05:10:03 PM America/Chicago |
| INFO | DEVICE | ********** | 62-5C-8D-15-B6-8A wireless client connected | FRIDAY NOVEMBER 5 05:06:32 PM America/Chicago |
| INFO | DEVICE | ********** | 62-5C-8D-15-B6-8A wireless client disconnected | FRIDAY NOVEMBER 5 04:52:57 PM America/Chicago |
| INFO | DEVICE | ********** | Client EE-A0-42-F1-1F-50 could not obtain IP address | FRIDAY NOVEMBER 5 04:51:25 PM America/Chicago |
| INFO | DEVICE | ********** | EE-A0-42-F1-1F-50 wireless client disconnected | FRIDAY NOVEMBER 5 04:49:55 PM America/Chicago |
| INFO | DEVICE | ********** | Client 1A-4D-1E-12-12-DC could not obtain IP address | FRIDAY NOVEMBER 5 04:46:53 PM America/Chicago |
| INFO | DEVICE | ********** | 1A-4D-1E-12-12-DC wireless client disconnected | FRIDAY NOVEMBER 5 04:46:53 PM America/Chicago |
| INFO | DEVICE | ********** | 5E-98-20-13-77-B9 wireless client connected | FRIDAY NOVEMBER 5 04:43:52 PM America/Chicago |
| INFO | DEVICE | ********** | client 5E-98-20-13-77-B9 authentication failed | FRIDAY NOVEMBER 5 04:42:19 PM America/Chicago |
| INFO | DEVICE | ********** | Client 5E-98-20-13-77-B9 could not obtain IP address | FRIDAY NOVEMBER 5 04:42:19 PM America/Chicago |
4 Replies
All the MAC addresses seem to be randomized MAC (or as Apple says "private MAC") apparently attempting to access the network, but not receiving an IP address, probably because the DHCP server does hand-out IP addresses to trusted or registered MAC addresses.
Supertoad wrote:
The log shows seemingly random devices connecting, disconnecting, unable to obtain IP addresses, and failing to authenticate.
Unclear from where the idea these devices failed to authenticate - can't see anything the like in the logs.
Supertoad wrote:
Is there a way to supress this info or is there an issue that needs to be addressed?
Suppressing messages is always a bad advise.
if your DHCP does hand-out DHCP addresses to trusted (hardware-), you might want to ensure or request that all clients don't have this crappy "random Mac" or "Private MAC" disabled. If you know for sure there are no "known" clients attempting to access, consider to change the preshared security key.
Thank you schumaku. That is helpful information. We will have to try to find out if any of the devices have that enabled. I agree that supressing messages is a bad idea. I believe the DHCP server is set to hand out IP addresses to any devices that can connect to the Wi-Fi.
I think in the log sample I provided, there are only two entries stating authentication failed.
In for answers. I'm dealing with the same exact issue. I own WAX610 as well and getting these disconnect / connect client notifications.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
