Scheduled maintenance: Community available only in read-only mode until 6:00 AM (PT)
Emerging Member
Posts: 92
Registered: ‎06-26-2009
Kudos: 5

Re: Class 2 frame received from nonauthenticated STA (6)

Can you get an explination why these MAC's are so simular, but different.   This is a point to point and the AP is pointed towards the hills, so there are very little UBNT radios there, much less with MAC's so simular.

Tim Kerns
Ubiquiti Employee
Posts: 11,657
Registered: ‎04-14-2017
Kudos: 2188
Solutions: 335

Re: Class 2 frame received from nonauthenticated STA (6)

I don't think I can, as I don't know what other radios are deployed in the area.
Emerging Member
Posts: 92
Registered: ‎06-26-2009
Kudos: 5

Re: Class 2 frame received from nonauthenticated STA (6)

Let me see if I can make this any clearer.....

 

To me it is obvious that either the sending radio or the receiving radio is SCREWING UP the MAC address and thinks there are more than one device, in reality all the MAC's above are from the SAME CLIENT RADIO. 

 

Dec 14 11:37:18 wireless: ath0     Sending deauth to a0:2a:a8:b6:58:13. Reason: Class 2 frame received from nonauthenticated STA (6).
Dec 14 11:42:24 dropbear[26561]: Child connection from 61.184.247.12:57992
Dec 14 11:42:27 dropbear[26561]: Exit before auth: Disconnect received
Dec 14 11:42:43 wireless: ath0     Sending deauth to 80:2a:a9:b6:58:13. Reason: Class 2 frame received from nonauthenticated STA (6).
Dec 14 11:43:19 wireless: ath0     Sending deauth to 80:2a:a8:a6:58:13. Reason: Class 2 frame received from nonauthenticated STA (6).
Dec 14 11:50:16 dropbear[26852]: Child connection from 61.184.247.8:57795
Dec 14 11:50:23 dropbear[26852]: Exit before auth: Disconnect received
Dec 14 11:52:45 wireless: ath0     Sending deauth to 80:2a:28:b6:58:13. Reason: Class 2 frame received from nonauthenticated STA (6).

 

Case in point .... the first MAC  A0:2A;A8 does not cross reference to any vendors, much less wireless vendors.

 

This should be enough information to open an insident with engineering.

 

Tim

 

Tim Kerns
Emerging Member
Posts: 92
Registered: ‎06-26-2009
Kudos: 5

Re: Class 2 frame received from nonauthenticated STA (6)

[ Edited ]

Also   80:2a:a9 does not cross reference to any mfg.

          80:2a:28 does not cross reference to any mfg.

 

https://macvendors.com/

 

 

Tim Kerns
Regular Member
Posts: 338
Registered: ‎01-12-2010
Kudos: 7

Re: Class 2 frame received from nonauthenticated STA (6)

It was ok for some time but the problem is back. Man Sad

CPE:

Jan  3 10:14:47 wireless: ath0     Received deauth from 78:8a:20:ac:d0:9b. Reason: Class 2 frame received from nonauthenticated STA (6).
Jan  3 10:14:58 wireless: ath0     New Access Point/Cell address:Not-Associated
Jan  3 10:15:10 wireless: ath0     Set Mode:Managed
Jan  3 10:15:10 wireless: ath0     Set Frequency:5.265 GHz (Channel 53)
Jan  3 10:15:11 wireless: ath0     New Access Point/Cell address:78:8A:20:AC:D0:9B

AP:

Jan  3 10:14:46 wireless: ath0     Expired node:44:D9:E7:C8:52:D0
Jan  3 10:14:46 wireless: ath0     Deauthenticated Station 44:d9:e7:c8:52:d0 (Tx consecutive failure)
Jan  3 10:14:46 hostapd: ath0: STA 44:d9:e7:c8:52:d0 IEEE 802.11: disassociated
Jan  3 10:14:47 wireless: ath0     Sending deauth to 44:d9:e7:c8:52:d0. Reason: Class 2 frame received from nonauthenticated STA (6).
Jan  3 10:15:10 wireless: ath0     Received auth from 44:d9:e7:c8:52:d0. Status: Successful (0).
Jan  3 10:15:10 wireless: ath0     Authenticated Station 44:d9:e7:c8:52:d0 (Successful)
Jan  3 10:15:10 wireless: ath0     Sending auth to 44:d9:e7:c8:52:d0. Status: Successful (0).
Jan  3 10:15:10 hostapd: ath0: STA 44:d9:e7:c8:52:d0 IEEE 802.11: associated
Jan  3 10:15:10 wireless: ath0     Received assoc_req from 44:d9:e7:c8:52:d0.
Jan  3 10:15:10 wireless: ath0     Sending assoc_resp to 44:d9:e7:c8:52:d0. Status: Successful (0).
Jan  3 10:15:10 wireless: ath0     Registered node:44:D9:E7:C8:52:D0
Jan  3 10:15:11 hostapd: ath0: STA 44:d9:e7:c8:52:d0 WPA: pairwise key handshake completed (RSN)
Ubiquiti Employee
Posts: 11,657
Registered: ‎04-14-2017
Kudos: 2188
Solutions: 335

Re: Class 2 frame received from nonauthenticated STA (6)

@caspat has anything changed in your setup?
Regular Member
Posts: 338
Registered: ‎01-12-2010
Kudos: 7

Re: Class 2 frame received from nonauthenticated STA (6)

nothing
Ubiquiti Employee
Posts: 1,592
Registered: ‎09-24-2018
Kudos: 315
Solutions: 92

Re: Class 2 frame received from nonauthenticated STA (6)

@tkerns perhaps the similar MACs are virtual interfaces on the station. I think I've been curious about this in the past but couldn't clarify any explanation.

UBNT_Alternate_Logo.png
Ubiquiti Networks airMAX Support Team

Check out our ever-evolving Help Center for answers to many common questions!

FREE UBWA Student Guide-Great RF Primer!

Emerging Member
Posts: 49
Registered: ‎04-02-2015
Kudos: 5

Re: Class 2 frame received from nonauthenticated STA (6)

Hello, is any news? I got same problem

 

Mar 28 12:11:38 wireless: ath0     Received deauth from 04:18:d6:f6:e7:77. Reason: Class 2 frame received from nonauthenticated STA (6).
Ubiquiti Employee
Posts: 11,657
Registered: ‎04-14-2017
Kudos: 2188
Solutions: 335

Re: Class 2 frame received from nonauthenticated STA (6)

This message has several possible causes. First, I would recommend checking for interference at the client site.
Highlighted
Emerging Member
Posts: 101
Registered: ‎10-27-2012
Kudos: 15
Solutions: 2

Re: Class 2 frame received from nonauthenticated STA (6)

Hi . I have similar issue in 2 AP ROCKET M5 Titanum, installed in area where i didn't  do changes.   They have  hidden SSID , and the MAC they not auth is  not in my network ( no one of them are  my AP or client ) .  I have also ACL rules enebled to allow only MY CLIENTSto be connected. Encryption is WPA-PSK , for now I cant change because I have down some clients and I cand change setup in thet clients before change encryption. . I dont know if it is an attak or what, but it seems very strange because I have hidden SSID , ACL rules and in the 2 AP the SSID is different.   Now i try to down to 6.1.6 and i will lwt u know  ( this probkem happened  after  firmware upgrade ) 

deauth.jpg
Emerging Member
Posts: 66
Registered: ‎09-13-2009
Kudos: 1

Re: Class 2 frame received from nonauthenticated STA (6)

I have the same message in the log from several days. Never seen that before. About once per day. Two NanoBridge M5 units running v6.1.12 (XM).

wireless: ath0     Sending deauth to 00:15:6d:f4:46:ec. Reason: Class 2 frame received from nonauthenticated STA (6)