MAC 00:19:d2:7f:a6:52 is sending bogus IPv6 Router Advertisements

[Pekka Savola <pekkas@…>]

Hi,

MAC 00:19:d2:7f:a6:52 is advertising bogus v6 prefixes and routers in 
the wireless and should be killed:

11:22:29.254248 00:19:d2:7f:a6:52 > 33:33:00:00:00:01, ethertype IPv6 
(0x86dd), length 166: fe80::6c4e:8ed1:3ad2:4cc4 > ff02::1: [icmp6 sum 
ok] icmp6: router advertisement(chlim=0, O pref=medium, 
router_ltime=65535, reachable_time=0, retrans_time=0)(src lladdr: 
00:19:d2:7f:a6:52)(mtu: mtu=1480)(unknown opt_type=24, 
opt_len=2)(prefix info: LA 
valid_ltime=7200,preferred_ltime=1800,prefix=2002:8281:1394:9::/64)(prefix 
info: LA valid_ltime=7200,preferred_ltime=1800,prefix=fec0:0:0:9::/64) 
(len 112, hlim 255)

I'm also having major wireless usage problems with 802.11b w/ SSID on 
AP 00:1A:1E:8E:7F:C1 (near convention 1), but that's probably 
unrelated.  Wires in terminal room are great though)

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

[Pekka Savola]

This message has 0 attachment(s)

[Bill Fenner]

We noticed this guy yesterday but for some reason couldn't follow through on blacklisting him.

It's blacklisted now. He was located in one of the Ballroom rooms at the time (BSSID 00:1a:1e:8e:da:61). Hopefully he will come to the NOC to solve his connectivity issues.

[Bill Fenner]

For the NOC staff: when this person comes to get un-blacklisted, use
​https://aruba2.meeting.ietf.org:4343/screens/switch/switch_mon.html?mode=blacklist

[(none)]

Milestone IETF Week ieft 72 deleted