NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
DEV-xx:xx:xx entries
An old issue I’ve seen posted about that is manifesting itself on my new 860 mesh setup that I wondered if anyone has any proven solution for. I didn’t get this on my 850. Random DEV entries showing in the device list. These seem to be LAA Macs starting 02.
I’ve disabled private wifi address on all my iOS devices thinking it was those.
Part of the challenge is they don’t age out quickly so I’m not sure if it’s a quirk with DHCP and devices initially using the LAA Mac but then settling on their static IP that has been assigned but leaving the DEV cached in the Orbi. If it’s this then it may eventually reconcile over time as leases are renewed and devices stick to their statics, but maybe it occurs at re lease if devices themselves are still set to dynamic and are relying on the Orbi to issue the static.
The DEV entries rarely respond to pings but I had a few that responded unreliably. Which suggests they are tombstone entries. The Orbi doesn’t have seem to have a neat way to clear individual ARP entries or do an entire flush without a reboot like you’d get with an enterprise device.
I’ve disabled private wifi address on all my iOS devices thinking it was those.
Part of the challenge is they don’t age out quickly so I’m not sure if it’s a quirk with DHCP and devices initially using the LAA Mac but then settling on their static IP that has been assigned but leaving the DEV cached in the Orbi. If it’s this then it may eventually reconcile over time as leases are renewed and devices stick to their statics, but maybe it occurs at re lease if devices themselves are still set to dynamic and are relying on the Orbi to issue the static.
The DEV entries rarely respond to pings but I had a few that responded unreliably. Which suggests they are tombstone entries. The Orbi doesn’t have seem to have a neat way to clear individual ARP entries or do an entire flush without a reboot like you’d get with an enterprise device.
6 Replies
Like any network device, the Orbi ARP cache will be erase when the router is rebooted. (not Factory Reset. simply restarted)
Orbi routers remember every MAC address that has ever connected. These are recorded in the tables found in the Orbi web interface, Advanced Tab, Security Menu, Access Control. Devices that are not longer using those artificial MAC addresses can be erased from the bottom two tables on that page. May have to scroll down to see the bottom two tables.
Orbi remembers even if Access Control is not enabled. In order to modify those records, Access Control has to be (temporarily) enabled. Then disabled again after the tables are cleared.
Be sure to check for Android devcies as well, they have MAC address randomizers now enabled by default.
Do a MAC address look up online to see if that help identify unknown devices.
Begin to power OFF devices one at a time to see if something appears for you...
What FW version is the system using?
Jeffgear wrote:
An old issue I’ve seen posted about that is manifesting itself on my new 860 mesh setup that I wondered if anyone has any proven solution for. I didn’t get this on my 850. Random DEV entries showing in the device list. These seem to be LAA Macs starting 02.
I’ve disabled private wifi address on all my iOS devices thinking it was those.
Part of the challenge is they don’t age out quickly so I’m not sure if it’s a quirk with DHCP and devices initially using the LAA Mac but then settling on their static IP that has been assigned but leaving the DEV cached in the Orbi. If it’s this then it may eventually reconcile over time as leases are renewed and devices stick to their statics, but maybe it occurs at re lease if devices themselves are still set to dynamic and are relying on the Orbi to issue the static.
The DEV entries rarely respond to pings but I had a few that responded unreliably. Which suggests they are tombstone entries. The Orbi doesn’t have seem to have a neat way to clear individual ARP entries or do an entire flush without a reboot like you’d get with an enterprise device.No Androids on network.
Google search says they are LAA self-assigned Macs starting 02.
I had a play with powering off iOS to see if they were from those devices, also turned off private addressing - they seem to be part of the issue as one entry was my Apple Watch that popped up, but other unknown devices pop up with DEV entries that I cannot identify.
7.2.6.31 running on the 860 mesh nodes.
I have powered off the extender and rebooted the router and so far no DEV entries are appearing. So I'm now wondering if it's caused by unanswered device DHCP requests via the extender leaving cached entries in the ARP table. The extender is an older RBS50Y reset into extender mode not Orbi mode - seems to work well apart from being the potential cause of rogue device entries.
I'll leave it off for a few days then power it back on and see if the rogues come back.
What mode is the RBS50Y working in? I presume extender mode?
Possible could have been some odd behavior there. Sounds like you narrowed it down.
Let us know after a few days if something appears.
