Newbie
malvar025
Posts: 4
Registered: ‎04-16-2012
Posts: 4
Registered: 04-16-2012

Massive CPE disconnection

Started two days ago, we see in the APs a very frequently CPEs massive disconnection.

The log of the AP shows this message:

Apr 16 21:58:11 wireless: ath0 Sending deauth to . Reason: Authentication is not valid (2).
Apr 16 21:58:11 wireless: ath0 Expired node:

APs are Rocket M5 AirOS 5.3.5
CPEs are Nano and Loco M5 AirOS 5.3.5

Any idea?
Is it possible we are suffering a wireless deauthentication attack?
Can we block it with ebtables?
Regular Member
wisp
Posts: 325
Registered: ‎08-24-2010
Posts: 325
Kudos: 60
Registered: 08-24-2010

Re: Massive CPE disconnection

Run AirView. You are probably experiencing interference.
SuperUser
Magician
Posts: 2,798
Registered: ‎10-12-2010
Posts: 2798
Kudos: 1213
Solutions: 11
Registered: 10-12-2010

Re: Massive CPE disconnection

How is the ap configured?
What type of security? wpa2-aes?
What are this signal levels at the tower from cpes?
UBRSS, UBWA, UEWA - Ubiquiti Certified Trainer
Newbie
malvar025
Posts: 4
Registered: ‎04-16-2012
Posts: 4
Registered: 04-16-2012

Re: Massive CPE disconnection

- There is no interference.
- No security
- Signal on CPEs ranges -50 to -60dB
- AP config:
aaa.1.status=disabled
aaa.status=disabled
bridge.1.devname=br0
bridge.1.fd=1
bridge.1.port.1.devname=eth0
bridge.1.port.1.prio=10
bridge.1.port.1.status=enabled
bridge.1.port.2.devname=ath0
bridge.1.port.2.prio=30
bridge.1.port.2.status=enabled
bridge.1.port.3.devname=eth1
bridge.1.port.3.prio=20
bridge.1.port.3.status=enabled
bridge.1.stp.status=disabled
bridge.status=enabled
dhcpc.1.devname=br0
dhcpc.1.status=disabled
dhcpc.status=disabled
dhcpd.1.status=disabled
dhcpd.status=disabled
discovery.status=enabled
dnsmasq.1.devname=eth0
dnsmasq.1.status=enabled
dnsmasq.status=disabled
dyndns.status=disabled
ebtables.1.cmd=-t nat -A PREROUTING --in-interface ath0 -j arpnat --arpnat-target ACCEPT
ebtables.1.status=disabled
ebtables.2.cmd=-t nat -A POSTROUTING --out-interface ath0 -j arpnat --arpnat-target ACCEPT
ebtables.2.status=disabled
ebtables.3.cmd=-t broute -A BROUTING --protocol 0x888e --in-interface ath0 -j DROP
ebtables.3.status=disabled
ebtables.4.cmd=-A FORWARD -p 0x8864 -j ACCEPT
ebtables.4.status=enabled
ebtables.5.cmd=-A FORWARD -p 0x8863 -j ACCEPT
ebtables.5.status=enabled
ebtables.50.status=disabled
ebtables.51.status=disabled
ebtables.52.status=disabled
ebtables.6.cmd=-P FORWARD DROP
ebtables.6.status=enabled
ebtables.status=enabled
gui.language=en_US
httpd.https.status=disabled
httpd.port=80
httpd.session.timeout=900
httpd.status=enabled
igmpproxy.status=disabled
iptables.3.status=disabled
iptables.50.status=disabled
iptables.51.status=disabled
iptables.52.status=disabled
iptables.status=disabled
netconf.1.alias.1.status=disabled
netconf.1.alias.2.status=disabled
netconf.1.alias.3.status=disabled
netconf.1.alias.4.status=disabled
netconf.1.alias.5.status=disabled
netconf.1.alias.6.status=disabled
netconf.1.alias.7.status=disabled
netconf.1.alias.8.status=disabled
netconf.1.autoip.status=disabled
netconf.1.devname=eth0
netconf.1.hwaddr.status=disabled
netconf.1.ip=0.0.0.0
netconf.1.mtu=1500
netconf.1.netmask=255.255.x.x
netconf.1.promisc=enabled
netconf.1.status=enabled
netconf.1.up=enabled
netconf.2.alias.1.status=disabled
netconf.2.alias.2.status=disabled
netconf.2.alias.3.status=disabled
netconf.2.alias.4.status=disabled
netconf.2.alias.5.status=disabled
netconf.2.alias.6.status=disabled
netconf.2.alias.7.status=disabled
netconf.2.alias.8.status=disabled
netconf.2.allmulti=enabled
netconf.2.autoip.status=disabled
netconf.2.devname=ath0
netconf.2.hwaddr.status=disabled
netconf.2.ip=0.0.0.0
netconf.2.mtu=1500
netconf.2.netmask=255.255.x.x
netconf.2.promisc=enabled
netconf.2.status=enabled
netconf.2.up=enabled
netconf.3.autoip.status=enabled
netconf.3.devname=br0
netconf.3.hwaddr.status=disabled
netconf.3.ip=172.x.x.x
netconf.3.mtu=1500
netconf.3.netmask=255.255.x.x
netconf.3.status=enabled
netconf.3.up=enabled
netconf.4.alias.1.status=disabled
netconf.4.alias.2.status=disabled
netconf.4.alias.3.status=disabled
netconf.4.alias.4.status=disabled
netconf.4.alias.5.status=disabled
netconf.4.alias.6.status=disabled
netconf.4.alias.7.status=disabled
netconf.4.alias.8.status=disabled
netconf.4.autoip.status=disabled
netconf.4.devname=eth1
netconf.4.hwaddr.status=disabled
netconf.4.ip=0.0.0.0
netconf.4.mtu=1500
netconf.4.netmask=255.255.x.x
netconf.4.up=enabled
netconf.5.autoip.status=disabled
netconf.5.devname=ath1
netconf.5.mtu=1500
netconf.6.status=disabled
netconf.status=enabled
netmode=bridge
ntpclient.status=disabled
ppp.1.status=disabled
ppp.status=disabled
pwdog.status=disabled
radio.1.ack.auto=enabled
radio.1.ackdistance=600
radio.1.acktimeout=25
radio.1.antenna.gain=0
radio.1.antenna=
radio.1.cable.loss=0
radio.1.chanshift=0
radio.1.clksel=1
radio.1.countrycode=511
radio.1.cwm.enable=0
radio.1.cwm.mode=0
radio.1.devname=ath0
radio.1.dfs.status=enabled
radio.1.forbiasauto=0
radio.1.freq=5130
radio.1.ieee_mode=11naht20
radio.1.low_txpower_mode=disabled
radio.1.mcastrate=15
radio.1.mode=master
radio.1.obey=disabled
radio.1.polling=enabled
radio.1.pollingnoack=0
radio.1.pollingpri=
radio.1.rate.auto=disabled
radio.1.rate.mcs=11
radio.1.reg_obey=disabled
radio.1.status=enabled
radio.1.subsystemid=0xe1b5
radio.1.txpower=27
radio.countrycode=511
radio.status=enabled
resolv.host.1.name=UBNT
resolv.host.1.status=enabled
resolv.nameserver.1.status=disabled
resolv.nameserver.2.status=disabled
resolv.status=enabled
route.1.devname=br0
route.1.gateway=172.x.x.1
route.1.ip=0.0.0.0
route.1.netmask=0
route.1.status=enabled
route.status=enabled
snmp.community=xxxxxx
snmp.contact=xxx
snmp.location=xxx
snmp.status=enabled
sshd.auth.passwd=enabled
sshd.port=22
sshd.status=enabled
syslog.remote.status=
syslog.status=disabled
system.button.reset=enabled
system.date.status=disabled
system.date=
system.eirp.status=enabled
system.latitude=
system.longitude=
system.timezone=GMT
telnetd.port=23
telnetd.status=enabled
tshaper.in.1.devname=eth0
tshaper.out.1.devname=ath0
users.1.name=xxxxxxxxx
users.1.password=xxxxxxxxxxxxxxx
users.1.status=enabled
users.2.status=disabled
users.status=enabled
vlan.1.status=disabled
vlan.2.status=disabled
vlan.status=disabled
wireless.1.addmtikie=enabled
wireless.1.ap=
wireless.1.authmode=1
wireless.1.devname=ath0
wireless.1.hide_ssid=disabled
wireless.1.mac_acl.1.mac=
wireless.1.mac_acl.1.status=disabled
wireless.1.mac_acl.10.mac=
wireless.1.mac_acl.10.status=disabled
wireless.1.mac_acl.11.mac=
wireless.1.mac_acl.11.status=disabled
wireless.1.mac_acl.12.mac=
wireless.1.mac_acl.12.status=disabled
wireless.1.mac_acl.13.mac=
wireless.1.mac_acl.13.status=disabled
wireless.1.mac_acl.14.mac=
wireless.1.mac_acl.14.status=disabled
wireless.1.mac_acl.15.mac=
wireless.1.mac_acl.15.status=disabled
wireless.1.mac_acl.16.mac=
wireless.1.mac_acl.16.status=disabled
wireless.1.mac_acl.17.mac=
wireless.1.mac_acl.17.status=disabled
wireless.1.mac_acl.18.mac=
wireless.1.mac_acl.18.status=disabled
wireless.1.mac_acl.19.mac=
wireless.1.mac_acl.19.status=disabled
wireless.1.mac_acl.2.mac=
wireless.1.mac_acl.2.status=disabled
wireless.1.mac_acl.20.mac=
wireless.1.mac_acl.20.status=disabled
wireless.1.mac_acl.21.mac=
wireless.1.mac_acl.21.status=disabled
wireless.1.mac_acl.22.mac=
wireless.1.mac_acl.22.status=disabled
wireless.1.mac_acl.23.mac=
wireless.1.mac_acl.23.status=disabled
wireless.1.mac_acl.24.mac=
wireless.1.mac_acl.24.status=disabled
wireless.1.mac_acl.25.mac=
wireless.1.mac_acl.25.status=disabled
wireless.1.mac_acl.26.mac=
wireless.1.mac_acl.26.status=disabled
wireless.1.mac_acl.27.mac=
wireless.1.mac_acl.27.status=disabled
wireless.1.mac_acl.28.mac=
wireless.1.mac_acl.28.status=disabled
wireless.1.mac_acl.29.mac=
wireless.1.mac_acl.29.status=disabled
wireless.1.mac_acl.3.mac=
wireless.1.mac_acl.3.status=disabled
wireless.1.mac_acl.30.mac=
wireless.1.mac_acl.30.status=disabled
wireless.1.mac_acl.31.mac=
wireless.1.mac_acl.31.status=disabled
wireless.1.mac_acl.32.mac=
wireless.1.mac_acl.32.status=disabled
wireless.1.mac_acl.4.mac=
wireless.1.mac_acl.4.status=disabled
wireless.1.mac_acl.5.mac=
wireless.1.mac_acl.5.status=disabled
wireless.1.mac_acl.6.mac=
wireless.1.mac_acl.6.status=disabled
wireless.1.mac_acl.7.mac=
wireless.1.mac_acl.7.status=disabled
wireless.1.mac_acl.8.mac=
wireless.1.mac_acl.8.status=disabled
wireless.1.mac_acl.9.mac=
wireless.1.mac_acl.9.status=disabled
wireless.1.mac_acl.policy=allow
wireless.1.mac_acl.status=disabled
wireless.1.macclone=disabled
wireless.1.scan_list.channels=
wireless.1.scan_list.status=disabled
wireless.1.security=none
wireless.1.ssid=XXXX
wireless.1.status=enabled
wireless.1.wds=disabled
wireless.status=enabled
wpasupplicant.device.1.status=disabled
wpasupplicant.status=disabled
Emerging Member
sonny
Posts: 41
Registered: ‎07-25-2010
Posts: 41
Registered: 07-25-2010

Re: Massive CPE disconnection

Hi,

we ar seeing the same disconnection problems all over our Network starting from April 1st. APs 5.3.5 /Client 5.3.5 + 5.3.2
Mostly Nanostation M5 with MAC starting at 00:27:22:56 + 00:27:22:3E the customer has to coldstart the unit twice a day.
It is horrible. all over the Network.

Now we upgraded 2 Rockets and 3 clients to 5.5,(on production network for testing) crossing fingers, uptime has already doubled to 1.5 day :icon_rolleyes:
Emerging Member
jack2k
Posts: 71
Registered: ‎10-06-2009
Posts: 71
Kudos: 8
Registered: 10-06-2009

Re: Massive CPE disconnection

Sonny, any news about this issue ? we're working with malvar on this problem but have no advance at time. The problem persist.

UBNT Staff?, any clue?, as we can see this problem is common to more people, love to hear something from ubnt staff.
New Member
Ed_Howard
Posts: 21
Registered: ‎10-29-2010
Posts: 21
Kudos: 2
Registered: 10-29-2010

Common theme

This is a common theme here now. There is a post already about this:

http://forum.ubnt.com/showthread.php?t=50945

I think we might want to keep this together hopefully UBNT will take it seriously.