NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Logs show repeated assign of IP to Mac Address
Hi all,
Sorry if this has been asked previously, but I couldn't find anything through searches.
(Setup: RBK853 running FW V4.6.14.3_2.3.12 in router mode, behind a Sagemcom F3896LG-VMB ISP modem).
I'm noticing that my logs are line after line of assigning an IP address to MAC addresses multiple times each day. For example;
[DHCP IP: (192.168.1.45)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 02:17:44
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 02:13:44
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 02:10:03
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 02:01:07
[DHCP IP: (192.168.1.90)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 01:59:33
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 01:57:28
[DHCP IP: (192.168.1.90)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 01:55:49
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 01:51:58
[DHCP IP: (192.168.1.63)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 01:51:43
It's often the same IP address multiple times;
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 00:59:07
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 00:55:07
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 00:53:02
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 00:51:57
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 00:51:27
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 00:44:57
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 00:44:26
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 00:34:33
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 00:29:00
[DHCP IP: (192.168.1.38)] to MAC address nnnnnnnnnnnnnnnn, Sunday, Jan 08,2023 00:24:22
192.168.1.38, which shows up, a lot, is a TV that is wired to the network, but through the logs there are all sorts of devices on the network being assigned IP addresses, including at various points, the 2 satellites.
Anyone know if this is this something I need to be bothered about? I can obviously change logging levels, but if there is something amiss, then probably worth knowing what's going on.
Thanks
6 Replies
What devices are these addresses going too? Apple? Android? IoT?
Thanks for the reply.
It's all sorts. Just been through one cluster of lines in the logs and it covers the following;Security Alarm
Sony Android TV
Apple Watch
Nintendo Switch
MacMini
Sonos Play 1
SkyQ TV box
HP Printer
iPad
PS5
Apple Time Capsule..
How many RBS are deployed?
What is the size of your home? Sq Ft?
What is the distance between the router and 📡 satellite(s)? 30 feet or more is recommended in between RBR and RBS🛰️ to begin with depending upon building materials when wirelessly connected.
https://kb.netgear.com/31029/Where-should-I-place-my-Orbi-satellite 🛰️What's the current default IP address range .2 to .254?
Might change this to .100 to .200.
Is IPv6 enabled or disabled?
Has a factory reset and setup from scratch been performed since last FW update?
DCP4971 wrote:
Anyone know if this is this something I need to be bothered about? I can obviously change logging levels, but if there is something amiss, then probably worth knowing what's going on.
This is definitely not "normal". The default DHCP lease time on the Orbi LAN is one day (86,400 seconds). When devices are following the standard DHCP protocol, they are supposed to renew the lease when it is half expired (12 hours). One would expect to see every device appear in the log two times per day. This applies to devices that are constantly connected, such as typical 'wired' devices, like the TV. Devices that "come and go" will do a DHCP request every time they connect to the network.
Routers do not spontaneously send out DHCP assignments. They react to requests. It would be fascinating to research what is causing these devices to send DHCP requests over and over, but I fear it would not be a trivial task.
As long as devices appear to be working correctly, I would be annoyed, but not bothered.
I too often see repeated DHCP IP address assignments in my RBRE960 logs. I just ignore it. For example, my Orbi has been up for over 2 days and yet within the past 48 hours I see this IP address assigned 3 times by one of my Nest cameras:
[DHCP IP: (192.168.1.48)] to MAC address xxx, Sunday, Jan 08,2023 12:29:05
[DHCP IP: (192.168.1.48)] to MAC address xxx, Sunday, Jan 08,2023 12:26:23[DHCP IP: (192.168.1.48)] to MAC address xxx, Sunday, Jan 08,2023 09:53:45
I'm certain this camera hasn't been power cycled recently so there's no reason for so many DHCP requests. And this is just one of many IP address examples in my home network. Fortunately, it is apparently harmless.
To me, this appears to be a classic case of "ping-ponging" - where devices connecting to the router, then a satellite, then a different satellite. This can happen when there is TOO much coverage.
Your options are reduce power level, remove a satellite, or change the placement of the satellites.
I think it was asked previously (but I don't remember seeing an answer) - how large of a home/apartment are you covering and with how many devices?
