Reply
Emerging Member
Posts: 76
Registered: ‎02-26-2014
Kudos: 6

NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

[ Edited ]

New: Support for the new Wireless Network Protection feature. This feature is enabled on AP and protects the airMAX network against de-authentication attacks. airMAX AC and airMAX M client devices are supported but they must be used with an airMAX AC AP. We recommend upgrading client devices first before enabling this feature on AP.

 

 

"...airMAX AC and airMAX M client devices are supported but they must be used with an airMAX AC AP."  ?????

 

If I have a Rocket M5 on the sector, I don't have any protection on de-authentication attacks? Do I need Rocket M5 AC on AP? It does not make sense...
I can't replace all the Rocket M5 on Rocket's with AC everywhere !!
I'm not quite sure I understand?

 

Veteran Member
Posts: 4,462
Registered: ‎03-02-2015
Kudos: 855
Solutions: 199

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

deauth attack protection only works if AP is 2AC/5AC with fw 8.5.1.
M5 APs don't have this feature so no protection.
(I guess M5/M2 hasn't enough resources ...CPU/RAM )
===================================================
We all work for KUDOs here.
Thx
Emerging Member
Posts: 76
Registered: ‎02-26-2014
Kudos: 6

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

[ Edited ]

New marketing ubnt?


Should I buy 100 of Rocket m5 AC? Are you kidding me? Who will pay for it?

In the noisy environment, half will be worse than on the old Rocket M5


DD-WRT - they made a security on old Rocket M5

CPU, RAM was enough !

 

suggestion:

if frame was received from nonauthenticated STA not sending deauth

Established Member
Posts: 1,668
Registered: ‎05-20-2008
Kudos: 432
Solutions: 6

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

Well..
I dont want to mention other manufacturers names in this forum too often but vendor M has the management frame protection feature in all of its products. CPU or RAM is not the limiting factor here. But maybe the marketing Man Happy
Emerging Member
Posts: 76
Registered: ‎02-26-2014
Kudos: 6

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

[ Edited ]

New firmware 6.1.6 on Rocket M5 XW and clients, channel 20 mhz other channel;

 

Mar  8 09:17:27 wireless: ath0     Sending deauth to 40:fa:99:b8:a4:92. Reason: Class 2 frame received from nonauthenticated STA (6).
Mar  8 09:25:08 wireless: ath0     Sending deauth to 00:27:22:b8:94:d3. Reason: Class 2 frame received from nonauthenticated STA (6).
Mar  8 09:29:08 wireless: ath0     Sending deauth to 50:16:65:c8:76:61. Reason: Class 2 frame received from nonauthenticated STA (6).
Mar  8 09:34:13 wireless: ath0     Sending deauth to 40:4c:46:23:99:d3. Reason: Class 2 frame received from nonauthenticated STA (6).
Mar  8 09:34:17 wireless: ath0     Sending deauth to 00:87:3d:29:7f:a4. Reason: Class 2 frame received from

I think I'll go and have a bit of a cry. Man Sad

 


Exactly.

All home routers that are produced would only have to be AC. ? 

And it can be protected.?

 

All Rocket M5 must be thrown into the bin. ?

Ubiquiti Employee
Posts: 10,924
Registered: ‎11-27-2012
Kudos: 3443
Solutions: 703
Contributions: 73

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

@Rufuss  Could you forward the Support Info file from an AP seeing this and a few of the stations that get disconnected?  Please forward to james@ubnt.com.

 

Please keep in mind that this might not actually be an attack, but related to RF issues/retries.   Are those non-UBNT MAC addresses typically associated with this AP?

 

 

UBNT_Alternate_Logo.png
Ubiquiti Networks airMAX Support Team

Check out our ever-evolving Help Center for answers to many common questions!

FREE UBWA Student Guide-Great RF Primer!

Ubiquiti Employee
Posts: 8,148
Registered: ‎04-14-2017
Kudos: 1565
Solutions: 225

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

Bear in mind that due to the custom airMAX protocol we cannot use the standard mechanism of de-authentication protection. We have had to create our own mechanism which relies on the capabilities of the airMAX AC protocol to provide the same protection.
Emerging Member
Posts: 76
Registered: ‎02-26-2014
Kudos: 6

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

@UBNT-SNKI don't understand why that's difficult to block frames from nonauthenticated STA?

SuperUser
Posts: 5,763
Registered: ‎08-26-2009
Kudos: 1763
Solutions: 55

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

the development team is only so big. if they are going to spend time engineering de-auth protection into a 9 year old product, they take time away from other high-priority tasks. if you are having de-auth problems, just replace those specific APs. your clients can stay M5, they don't have to upgrade. 

Ubiquiti Employee
Posts: 8,148
Registered: ‎04-14-2017
Kudos: 1565
Solutions: 225

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

I'm going to have to agree with @twinkletoes here. It's a lot of development effort to implement this on the M series products.
Emerging Member
Posts: 76
Registered: ‎02-26-2014
Kudos: 6

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

[ Edited ]

@twinkletoes @UBNT-SNK

The explanatory statement is not completely convincing.

Thanks to the fact that people buy your products, you have money. The whole world has your Rocket M5 XM, XW products. In one moment, everyone will not turn to AC. I only buy XW, I have a lot of noise. AC works badly. Secondly, Rocket AC are too expensive. Get better to do Man Happy

Highlighted
SuperUser
Posts: 5,763
Registered: ‎08-26-2009
Kudos: 1763
Solutions: 55

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

Have you actually tried a recent Rocket 5AC ? They work great with recent firmware. They are not more sensitive to interference.

 

So, just because Rocket is still a supported product, you are entitled to all features on the 5AC? What about the other features that are on AC, but not M series? You expect those to all be supported now too?

 

If you put your effort into getting the NEW APs working on your network, you UNLOCK the capabilities....

Emerging Member
Posts: 76
Registered: ‎02-26-2014
Kudos: 6

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

Why they sell still leaky equipment, they take money and do not provide support. Old UNIFI everyone has to change to AC?.  It's a funny...

Ubiquiti Employee
Posts: 8,148
Registered: ‎04-14-2017
Kudos: 1565
Solutions: 225

Re: NEW firmware 6.1.6 XM/XW/TI de-authentication attacks protection

I'm going to lock this one as it's getting a little off topic.
Reply