Jump to content

ARP poisoning attack and duplicate ip addresses on network


liljunebug
 Share

Recommended Posts

HI ive resetted my router and made multiple wifis but everytime i add my wifi tp link extender i get 60+ notifications of ARP poisoning attacks and duplicate addressses on my network.

Is there someone actually hacking into my stuff or is it just a false positive? and when i looked up one of the addresses and MAC address it is my security home camera but im not understanding whats happening here.

Link to comment
Share on other sites

  • Administrators

The ARP attack detection is the result of existence of duplicate IP addresses in your network. Make sure that the network adapters are configured to obtain IP addresses automatically from a DHCP server.

Link to comment
Share on other sites

Refer to this posting: https://forum.eset.com/topic/27838-arp-cache-poisoning-notification-after-adding-extender/ .

The poster's solution was:

Quote

The network consists of a Netgear R7000 router and a Netgear EX7000 mesh extender running both a 2.4 and 5G network with one wired desktop which never duplicated)  and 15 devices.

Here's the solution:

1 Shut off the extender

2 Log into the router and reserve a block of address for static IPs. In my case 192.168.1.2 - 192.168.1.50.  Anything on the network will then be bumped to 192.168.1.51+

3. If a device can operate on both 2.4 and 5G, chose one and forget the other or you will have to repeat steps

4. Assign static IP addresses for each device.

5 If you really want or need to have both 2.4 and 5G on a device you will have to add another static IP for the other network as The Pit pointed out, MAC randomization creates a new MAC address for each network a devices connects to (one for 2.4 and another for 5G)

6. Reboot the modem, turn on the extender

To keep things simple, we kept all devices on 2.4, allowing the extender to sit alone on the 5G network.

Everything works perfectly now, both on the Netgear app, and ESET's Connected Home Monitor.

Edited by itman
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...