Opened 10 years ago

Closed 10 years ago

Last modified 8 years ago

#29 closed request (fixed)

MAC 00:19:d2:7f:a6:52 is sending bogus IPv6 Router Advertisements

Reported by: Pekka Savola <pekkas@…> Owned by: Bill Fenner
Priority: major Milestone:
Component: wireless Keywords:
Cc: My Current Location:
My MAC Address: My OS:

Description (last modified by Bill Fenner)

Hi,

MAC 00:19:d2:7f:a6:52 is advertising bogus v6 prefixes and routers in 
the wireless and should be killed:

11:22:29.254248 00:19:d2:7f:a6:52 > 33:33:00:00:00:01, ethertype IPv6 
(0x86dd), length 166: fe80::6c4e:8ed1:3ad2:4cc4 > ff02::1: [icmp6 sum 
ok] icmp6: router advertisement(chlim=0, O pref=medium, 
router_ltime=65535, reachable_time=0, retrans_time=0)(src lladdr: 
00:19:d2:7f:a6:52)(mtu: mtu=1480)(unknown opt_type=24, 
opt_len=2)(prefix info: LA 
valid_ltime=7200,preferred_ltime=1800,prefix=2002:8281:1394:9::/64)(prefix 
info: LA valid_ltime=7200,preferred_ltime=1800,prefix=fec0:0:0:9::/64) 
(len 112, hlim 255)

I'm also having major wireless usage problems with 802.11b w/ SSID on 
AP 00:1A:1E:8E:7F:C1 (near convention 1), but that's probably 
unrelated.  Wires in terminal room are great though)

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Change history (7)

comment:1 Changed 10 years ago by Pekka Savola

id: 29

This message has 0 attachment(s)

comment:2 Changed 10 years ago by Bill Fenner

Owner: changed from llynch@… to Bill Fenner
Priority: blocker
Status: newaccepted
Type: request

We noticed this guy yesterday but for some reason couldn't follow through on blacklisting him.

It's blacklisted now. He was located in one of the Ballroom rooms at the time (BSSID 00:1a:1e:8e:da:61). Hopefully he will come to the NOC to solve his connectivity issues.

comment:3 Changed 10 years ago by Bill Fenner

Component: incomingwireless
Description: modified (diff)
Priority: blockermajor

comment:4 Changed 10 years ago by Bill Fenner

For the NOC staff: when this person comes to get un-blacklisted, use
https://aruba2.meeting.ietf.org:4343/screens/switch/switch_mon.html?mode=blacklist

comment:5 Changed 10 years ago by Bill Fenner

Description: modified (diff)
Summary: MAC 00:19:d2:7f:a6:52 needs to be killedMAC 00:19:d2:7f:a6:52 is sending bogus IPv6 Router Advertisements

comment:6 Changed 10 years ago by joelja@…

Resolution: fixed
Status: acceptedclosed

comment:7 Changed 8 years ago by (none)

Milestone: IETF Week ieft 72

Milestone IETF Week ieft 72 deleted

Note: See TracTickets for help on using tickets.