Funzionamento anomalo del server DHCP

[Mapy3066]

Salve a tutti,

ho da poco acquistato  un router R7800 Nighthawk X4S AC2600 e l'ho aggiornato al l'ultima versione del firmware la 1.0.2.20.

E' da qualche giorno che nel log messaggi trovo la seguente situazione:

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 21:32:23

[DHCP IP: 10.0.0.102] to MAC address 00:23:14:b7:e3:e0, Wednesday, February 01, 2017 21:16:59

[DHCP IP: 10.0.0.102] to MAC address 00:23:14:b7:e3:e0, Wednesday, February 01, 2017 21:16:50

[DHCP IP: 10.0.0.105] to MAC address 54:60:09:56:fa:68, Wednesday, February 01, 2017 21:08:59

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 21:08:04

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 21:08:02

[DHCP IP: 10.0.0.102] to MAC address 00:23:14:b7:e3:e0, Wednesday, February 01, 2017 21:07:03

[DHCP IP: 10.0.0.102] to MAC address 00:23:14:b7:e3:e0, Wednesday, February 01, 2017 21:06:55

[DHCP IP: 10.0.0.102] to MAC address 00:23:14:b7:e3:e0, Wednesday, February 01, 2017 21:02:36

[DHCP IP: 10.0.0.102] to MAC address 00:23:14:b7:e3:e0, Wednesday, February 01, 2017 21:01:52

[DHCP IP: 10.0.0.105] to MAC address 54:60:09:56:fa:68, Wednesday, February 01, 2017 20:50:48

[DHCP IP: 10.0.0.105] to MAC address 54:60:09:56:fa:68, Wednesday, February 01, 2017 20:39:53

[DHCP IP: 10.0.0.105] to MAC address 54:60:09:56:fa:68, Wednesday, February 01, 2017 20:39:44

[DHCP IP: 10.0.0.105] to MAC address 54:60:09:56:fa:68, Wednesday, February 01, 2017 20:39:41

[DHCP IP: 10.0.0.104] to MAC address e8:5b:5b:0e:86:4b, Wednesday, February 01, 2017 20:39:30

[Internet connected] IP address: 192.168.1.100, Wednesday, February 01, 2017 20:08:13

[Time synchronized with NTP server] Wednesday, February 01, 2017 20:00:20

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 19:54:04

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 19:54:02

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 19:54:00

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 19:42:54

[DHCP IP: 10.0.0.109] to MAC address ac:5f:3e:01:85:d8, Wednesday, February 01, 2017 19:32:59

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 18:56:50

[DHCP IP: 10.0.0.112] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 18:53:30

[DHCP IP: 10.0.0.112] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 18:53:29

[DHCP IP: 10.0.0.112] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 18:53:27

[DHCP IP: 10.0.0.104] to MAC address e8:5b:5b:0e:86:4b, Wednesday, February 01, 2017 18:46:18

[DHCP IP: 10.0.0.112] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 18:23:59

[DHCP IP: 10.0.0.111] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 18:23:57

[DHCP IP: 10.0.0.111] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 18:23:53

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 18:06:08

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 18:05:59

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 17:20:21

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 17:20:10

[DHCP IP: 10.0.0.111] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 17:09:21

[DHCP IP: 10.0.0.101] to MAC address f4:06:8d:03:fe:b5, Wednesday, February 01, 2017 16:59:10

[UPnP set event: add_nat_rule] from source 10.0.0.110, Wednesday, February 01, 2017 16:57:15

[UPnP set event: del_nat_rule] from source 10.0.0.110, Wednesday, February 01, 2017 16:57:11

[DHCP IP: 10.0.0.110] to MAC address c4:17:fe:a8:3f:01, Wednesday, February 01, 2017 16:56:43

[DHCP IP: 10.0.0.110] to MAC address c4:17:fe:a8:3f:01, Wednesday, February 01, 2017 16:56:15

[DoS Attack: RST Scan] rmsuc:8.89.3,pr 4,0 ongop[b000, Wednesday, February 01, 2017 16:26:10

[DHCP IP: 10.0.0.111] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 14:19:31

[DHCP IP: 10.0.0.111] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 14:14:29

[Internet connected] IP address: 192.168.1.100, Wednesday, February 01, 2017 14:07:13

[DHCP IP: 10.0.0.105] to MAC address 54:60:09:56:fa:68, Wednesday, February 01, 2017 14:00:58

[DHCP IP: 10.0.0.104] to MAC address e8:5b:5b:0e:86:4b, Wednesday, February 01, 2017 14:00:48

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 13:08:23

[DHCP IP: 10.0.0.111] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 12:48:56

[DHCP IP: 10.0.0.113] to MAC address bc:5f:f4:ad:92:4b, Wednesday, February 01, 2017 12:20:28

[DHCP IP: 10.0.0.111] to MAC address 34:4d:f7:3c:31:e7, Wednesday, February 01, 2017 12:17:59

[DHCP IP: 10.0.0.113] to MAC address bc:5f:f4:ad:92:4b, Wednesday, February 01, 2017 12:05:27

[Internet connected] IP address: 192.168.1.100, Wednesday, February 01, 2017 08:06:12

[DHCP IP: 10.0.0.109] to MAC address ac:5f:3e:01:85:d8, Wednesday, February 01, 2017 07:51:25

[DHCP IP: 10.0.0.107] to MAC address 48:5a:3f:63:62:4d, Wednesday, February 01, 2017 07:51:12

[UPnP set event: add_nat_rule] from source 10.0.0.106, Wednesday, February 01, 2017 07:42:07

[UPnP set event: del_nat_rule] from source 10.0.0.106, Wednesday, February 01, 2017 07:42:03

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Wednesday, February 01, 2017 07:39:52

[DHCP IP: 10.0.0.101] to MAC address f4:06:8d:03:fe:b5, Wednesday, February 01, 2017 04:59:07

[DHCP IP: 10.0.0.108] to MAC address c4:36:6c:93:41:ea, Wednesday, February 01, 2017 04:26:26

[DHCP IP: 10.0.0.105] to MAC address 54:60:09:56:fa:68, Wednesday, February 01, 2017 02:15:57

[DHCP IP: 10.0.0.104] to MAC address e8:5b:5b:0e:86:4b, Wednesday, February 01, 2017 02:15:45

[Internet connected] IP address: 192.168.1.100, Wednesday, February 01, 2017 02:05:12

dove sembra che il servizio DHCP non "trovi pace" nell'assegnare un indirizzo alle periferiche collegate.

A me tutto questo non sembra normale, qualcuno saprebbe aiutarmi in merito, manca forse qualche impostazione nei settaggi del router o che altro?

Grazie

[EvelinaS]

Salve @Mapy3066, 

Grazie per suo il post e Benvenuto nella Community!

In effetti i registri mostrano che l'assegnazione degli indirizzi IP avviene frequentemente ed in un modo random. Le chiederei di prenotare indirizzo IP agli dispositivi che si collegano al router e verificare di nuovo i registri. Se questo comportamento persiste provi a ripristinare il router alle impostazioni predefinite tramite il tasto reset, poi esegua una nuova configurazione. 

In attesa di sue notizie.

Cordiali Saluti, 

Evelina

Team NETGEAR 

[Mapy3066]

Grazie intanto per i suggerimenti,

volevo chiedere se dopo il reset conviene impostare tutto a mano da capo o si possa eseguire un ripristino della configurazione precedentemente salvata.

Proverò domani ad eseguire tale reset ma nel caso in cui non si dovesse risolvere penso che da parte di Netgear sia necessario eseguire qualche verifica nel codice del firmware del prodotto, potrebbe essere presente anche un bug che si presenta in condizioni particolari di utilizzo della configurazione, staremo a vedere.

Penso inoltre che un router di tale fascia, che ha peraltro un costo non indifferente, non debba presentare una tale disfunzione sul servizio DHCP, farò sapere, grazie.

[EvelinaS]

Buongiorno @Mapy3066, 

Grazie per il feedback. Dopo il ripristino del router suggerirei di eseguire una configurazione manuale.

In attesa di suoi aggiornamenti.

Buona giornata.

Evelina

Team NETGEAR 

[Mapy3066]

Buongiorno Evelina,

ho fatto quanto suggerito nella mattinata di sabato scorso e reimpostato manualmente le informazioni di configurazione ma la situazione non mi sembra sia cambiata, segue il log di sabato sera:

[DHCP IP: 10.0.0.109] to MAC address c4:36:6c:93:41:ea, Saturday, February 04, 2017 23:42:24

[DHCP IP: 10.0.0.107] to MAC address 48:5a:3f:63:62:4d, Saturday, February 04, 2017 23:24:21

[admin login] from source 10.0.0.102, Saturday, February 04, 2017 23:23:27

[DHCP IP: 10.0.0.109] to MAC address c4:36:6c:93:41:ea, Saturday, February 04, 2017 23:14:48

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Saturday, February 04, 2017 23:12:51

[DHCP IP: 10.0.0.107] to MAC address 48:5a:3f:63:62:4d, Saturday, February 04, 2017 23:05:22

[DHCP IP: 10.0.0.108] to MAC address ac:5f:3e:01:85:d8, Saturday, February 04, 2017 23:04:04

[UPnP set event: del_nat_rule] from source 10.0.0.102, Saturday, February 04, 2017 23:02:46

[UPnP set event: add_nat_rule] from source 10.0.0.102, Saturday, February 04, 2017 22:11:39

[UPnP set event: del_nat_rule] from source 10.0.0.102, Saturday, February 04, 2017 20:55:24

[DHCP IP: 10.0.0.107] to MAC address 48:5a:3f:63:62:4d, Saturday, February 04, 2017 20:41:09

[UPnP set event: add_nat_rule] from source 10.0.0.102, Saturday, February 04, 2017 20:11:54

[DHCP IP: 10.0.0.102] to MAC address 00:18:f3:fe:2d:42, Saturday, February 04, 2017 20:09:50

[DHCP IP: 10.0.0.102] to MAC address 00:18:f3:fe:2d:42, Saturday, February 04, 2017 20:09:47

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Saturday, February 04, 2017 20:07:31

[DHCP IP: 10.0.0.102] to MAC address 00:18:f3:fe:2d:42, Saturday, February 04, 2017 20:07:23

[Time synchronized with NTP server] Saturday, February 04, 2017 20:05:49

[DHCP IP: 10.0.0.105] to MAC address e8:5b:5b:0e:86:4b, Saturday, February 04, 2017 20:05:35

[DHCP IP: 10.0.0.104] to MAC address 34:4d:f7:3c:31:e7, Saturday, February 04, 2017 20:05:20

[Internet connected] IP address: 192.168.1.100, Saturday, February 04, 2017 20:04:48

[DHCP IP: 10.0.0.103] to MAC address 54:60:09:56:fa:68, Saturday, February 04, 2017 20:04:47

[USB device attached] The USB storage device () is attached to the router, Saturday, February 04, 2017 20:04:44

[Initialized, firmware version: V1.0.2.20] Saturday, February 04, 2017 20:04:43

Non sono molto preparato sulla materia ma, ripeto, a naso direi che qualcosa non va'.

Mi chiedevo, ma potrebbe essere presente in rete qualche dispositivo che induce il router ad eseguire tale attività in modo forzato? Ad es. io ho in rete anche 3 dispositivi power lan della devolo che utilizzo per portale la eth in altri punti della casa !?!

Non saprei cosa altro ipotizzare, cmq spero in un prossimo aggiornamento del firmware del router magari uscirà un bug fix che porrà rimedi al problema.

Non so se da parte vs possiate fare qualche segnalazione ufficiale a NETGEAR america o laboratorio di sviluppo sw che si occupa del firmware magari ne sono già a conoscenza e vi porranno rimedio.

Grazie per il supporto,

Mauro

[EvelinaS]

Buongiorno Mauro, 

Grazie per la risposta e di aver allegato attuali registri.  Si nota che l'assegnazione dell'indirizzo IP non si ripete come negli registri precedenti, sembra una normale attività del server DHCP. 

Come mostrato nei registri sottostanti, il dispositivo con il MAC 90:68:c3.... ha ricevuto l'IP dal server alle ore 20:07:31 e poi di nuovo alle ore  23:12:51. Probabilmente lo Smartphone o PC si è disconnesso dalla rete del router per connettersi ad una diversa rete oppure era in modalità stand-by.  

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Saturday, February 04, 2017 20:07:31

[DHCP IP: 10.0.0.106] to MAC address 90:68:c3:05:d6:a8, Saturday, February 04, 2017 23:12:51

L'assegnazione dell'indirizzo IP avviene dopo che il dispositivo (client) manda una richiesta ((discover)  al server, quindi, il server offre un IP al dispositivo. Può trovare maggiori informazioni qui. Di solito la richiesta al server per ricevere un IP viene iniziata dalla periferica (il PC o altro dispositivo come lo Smartphone etc.).

Spero che queste informazioni le siano d'aiuto.

Cordiali Saluti,

Evelina

Team NETGEAR