NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
SCDock
Jul 04, 2022Aspirant
DoS Attack: ARP Attack when my Orbi Pro satellite is plugged in
My electrician wired the Orbi Pro ceiling mount satellite incorrectly, so that when the switch for the lights are turned off, the power to the satellite goes out as well. We have been meaning to fix...
CrimpOn
Jul 04, 2022Guru - Experienced User
The router has detected an abnormal number of ARP requests in a short time, which it labels as a Denial of Service Attack.
My guess is that this is instead an ARP Storm caused by some device connecting to the newly activated satellite:
https://en.wikipedia.org/wiki/Broadcast_storm
All those devices keep saying "Who has <a specific IP address>?" and answers come through different satellites.
- It's over here.
- No, it's over there.
- No, it's over here.
If you captured the actual LAN packets using the feature on the debug page, my guess is that you would see all those ARP requests.
If this just started happening, it is probably some WiFi device that has been moved and now has a choice of satellites with strong signals.
There appear to be two solutions:
- Turn the lights on 10 minutes before starting work, or
- Keep the satellite powered on.