Wireless Access

Reply
Frequent Contributor I
Posts: 68
Registered: ‎01-03-2014

what does :authmgr MAC=78:4f:43:54:3a:bb IP=172.25.163.234 IP Spoof from MAC=78:4f:43:54:3c:4a roll

what is it this message is telling me:

 

authmgr    MAC=78:4f:43:54:3a:bb IP=172.25.163.234 IP Spoof from MAC=78:4f:43:54:3c:4a role=authenticated   and where is it comming from?   we are running 6.4.4.8 code on a 7200 controller with 325 ap's

we are using clear pass for our authentication server and we are using Certificates on the mac book pros to do the authentication.   is this message saying that the two machines have the same cert in them and using it to authenticate?

Guru Elite
Posts: 20,819
Registered: ‎03-29-2007

Re: what does :authmgr MAC=78:4f:43:54:3a:bb IP=172.25.163.234 IP Spoof from MAC=78:4f:43:54:3c:4a r

That is when two devices have or attempt to have the same IP address.

What is the output of "show AAA timer"?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor I
Posts: 68
Registered: ‎01-03-2014

Re: what does :authmgr MAC=78:4f:43:54:3a:bb IP=172.25.163.234 IP Spoof from MAC=78:4f:43:54:3c:4a r

Colin,  thanks for the response.   the output is :

 

(ortamc01w) #show aaa timer

Global User idle timeout = 300 seconds
Auth Server dead time = 10 minutes
Logon user lifetime = 10 minutes
User Interim stats frequency = 600 seconds

Guru Elite
Posts: 20,819
Registered: ‎03-29-2007

Re: what does :authmgr MAC=78:4f:43:54:3a:bb IP=172.25.163.234 IP Spoof from MAC=78:4f:43:54:3c:4a r

Okay. What is your DHCP server lease time on that subnet?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor I
Posts: 68
Registered: ‎01-03-2014

Re: what does :authmgr MAC=78:4f:43:54:3a:bb IP=172.25.163.234 IP Spoof from MAC=78:4f:43:54:3c:4a r

8 hours



Sent via the Samsung Galaxy S® 6, an AT&T 4G LTE smartphone
Frequent Contributor I
Posts: 68
Registered: ‎01-03-2014

Re: what does :authmgr MAC=78:4f:43:54:3a:bb IP=172.25.163.234 IP Spoof from MAC=78:4f:43:54:3c:4a r

8 hours



Sent via the Samsung Galaxy S® 6, an AT&T 4G LTE smartphone
Guru Elite
Posts: 20,819
Registered: ‎03-29-2007

Re: what does :authmgr MAC=78:4f:43:54:3a:bb IP=172.25.163.234 IP Spoof from MAC=78:4f:43:54:3c:4a r

For some reason, a user is attempting to join with the ip address of another device and it was not allowed.  Sometimes devices attempt to use the last ip address that they had before, but I would open a TAC case to see how extensive this is to see if it is a real concern.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor I
Posts: 68
Registered: ‎01-03-2014

Re: what does :authmgr MAC=78:4f:43:54:3a:bb IP=172.25.163.234 IP Spoof from MAC=78:4f:43:54:3c:4a r

what we found was that clients were getting duplicate ip addresses due to the fact that we were using the same client id on all boxes so the dhcp server was seeing that id and giving them the same ip address.  once we made the client id on the macs be uinique this stopped happening.

Search Airheads
Showing results for 
Search instead for 
Did you mean: