NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

nightowl2k2's avatar
nightowl2k2
Aspirant
Aug 12, 2022

WAX202 rouge 2.4 GHz endpoint

I have a couple WAX202 WiFi routers and in both cases I am seeing a rogue 2.4Ghz endpoint that shows up after a short amount of time  of the router being online.  I have seen this happen on 2 devices now and I am concerned that the router firmware was compromised in some way unless someone can explain what the rouge client is.  Here are the specifics I am seeing.  The device always shows up on the 2.4Ghz band and both routers were just configured after pulling them from the box.  They are both running the latest 1.0.5 firmware.  The device has an unknown MAC OUI and it does receive a DHCP address but it cannot be ping'd at all.  Also, the device still shows up if I change the WPA password on the router.  Now, it does not show up right away but does show up after a short amount of time.

 

My questions:

 

1) Has anyone else seen this?  If so, what were your experiences

2) Is this something part of the Netgear WAX202 firmware?  If so, what is it?

4 Replies

  • plemans's avatar
    plemans
    Guru - Experienced User

    Are you using any ios devices? If so, disable icloud relay and private mac/ip address. 

    • nightowl2k2's avatar
      nightowl2k2
      Aspirant

      I am using IOS/Mac devices but my Mac is on the 5Ghz band and not on the 2.4Ghz band.  So, that part does not seem to make sense here.

      • nightowl2k2's avatar
        nightowl2k2
        Aspirant

        I can also disconnect my Mac and I still see an endpoint connected to the 2.4Ghz radio.  So that also clears the Mac Internet relay function.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More