BEFW11S4 v4 begins to talk to Router through LAN port

My configuration has been a DI-604 (wired DLink router) connected to a
BEFW11S4 v4 (Linksys wireless router) LAN port. The clients that
connect through the Linksys router need to pass the MAC filter on the
DLink router. DHCP on the Linksys router has been turned off.

This configuration has working well for over a month. Recently, I
noticed that the Linksys router LAN side MAC address has been rejected
at the DLink router - the address indeed is not in the access list.
It occurs every 5 to 10 minutes. I don't believe that this was
happening before and I am curious to find out why this is happening.
I don't believe that the Linksys AP should be talking to anything -
nor is it behaving as a router.

I have since added the LAN side address to the MAC filter list but
wanted to know why this began happening.


Chris

(E-Mail Removed) (Chris) wrote in
news:(E-Mail Removed) om:

> My configuration has been a DI-604 (wired DLink router) connected to a
> BEFW11S4 v4 (Linksys wireless router) LAN port. The clients that
> connect through the Linksys router need to pass the MAC filter on the
> DLink router. DHCP on the Linksys router has been turned off.

OK

> I don't believe that the Linksys AP should be talking to anything -
> nor is it behaving as a router.

What do you mean by that? Of course, Linksys is communicating with the
gateway router. It may be acting as a switch but it is communicating with
the computers connected to it too.

I know on my old 11S4 v1 acting as a switch and connected to the
WatchGuard, the Linksys is configured to be a Router and not a Gateway
through the Linksys Admin screen. Have you done that?

>
> I have since added the LAN side address to the MAC filter list but
> wanted to know why this began happening.
>

Maybe, D-link and Linksys don't play well together.

Duane

"Duane Arnold" <(E-Mail Removed)> wrote in message
news:Xns956F55B2C3FA5notmenotmecom@63.240.76.16...
> (E-Mail Removed) (Chris) wrote in
> news:(E-Mail Removed) om:
>
>> My configuration has been a DI-604 (wired DLink router) connected to a
>> BEFW11S4 v4 (Linksys wireless router) LAN port. The clients that
>> connect through the Linksys router need to pass the MAC filter on the
>> DLink router. DHCP on the Linksys router has been turned off.

I take this to mean that the D-Link router's WAN port connects toward the
Internet, and the Linksys router's WAN port is unused.

>> I don't believe that the Linksys AP should be talking to anything -
>> nor is it behaving as a router.
>
> What do you mean by that? Of course, Linksys is communicating with the
> gateway router. It may be acting as a switch but it is communicating with
> the computers connected to it too.

I believe that Chris means that the Linksys switch is not sourcing any
frames; it's only passing frames from computers to the D-Link and
vice-versa. In that scenario the Linksys's MAC address would never appear
in any frame. Apparently the Linksys has begun sourcing frames. If you had
started using the Linksys WAN port to connect to the D-Link, then the
Linksys would again behave like a router and would source frames. Also, the
Linksys may be emailing log entries according to the email parameters in its
configuration; perhaps it never had log entries to report before.

>
> I know on my old 11S4 v1 acting as a switch and connected to the
> WatchGuard, the Linksys is configured to be a Router and not a Gateway
> through the Linksys Admin screen. Have you done that?
>
>>
>> I have since added the LAN side address to the MAC filter list but
>> wanted to know why this began happening.
>>
>
> Maybe, D-link and Linksys don't play well together.

Unlikely.

> Duane

"Ron Bandes" <RunderscoreBandes @yah00.com> wrote in message news:<Byf5d.13343$(E-Mail Removed) .net>...
> "Duane Arnold" <(E-Mail Removed)> wrote in message
> news:Xns956F55B2C3FA5notmenotmecom@63.240.76.16...
> > (E-Mail Removed) (Chris) wrote in
> > news:(E-Mail Removed) om:
> >
> >> My configuration has been a DI-604 (wired DLink router) connected to a
> >> BEFW11S4 v4 (Linksys wireless router) LAN port. The clients that
> >> connect through the Linksys router need to pass the MAC filter on the
> >> DLink router. DHCP on the Linksys router has been turned off.
>
> I take this to mean that the D-Link router's WAN port connects toward the
> Internet, and the Linksys router's WAN port is unused.


>
> >> I don't believe that the Linksys AP should be talking to anything -
> >> nor is it behaving as a router.
> >
> > What do you mean by that? Of course, Linksys is communicating with the
> > gateway router. It may be acting as a switch but it is communicating with
> > the computers connected to it too.
>
> I believe that Chris means that the Linksys switch is not sourcing any
> frames; it's only passing frames from computers to the D-Link and
> vice-versa. In that scenario the Linksys's MAC address would never appear
> in any frame. Apparently the Linksys has begun sourcing frames. If you had
> started using the Linksys WAN port to connect to the D-Link, then the
> Linksys would again behave like a router and would source frames. Also, the
> Linksys may be emailing log entries according to the email parameters in its
> configuration; perhaps it never had log entries to report before.
>
> >
> > I know on my old 11S4 v1 acting as a switch and connected to the
> > WatchGuard, the Linksys is configured to be a Router and not a Gateway
> > through the Linksys Admin screen. Have you done that?
> >
> >>
> >> I have since added the LAN side address to the MAC filter list but
> >> wanted to know why this began happening.
> >>
> >
> > Maybe, D-link and Linksys don't play well together.
>
> Unlikely.
>
> > Duane

Yes - the WAN port is unused. Yes - it is not functioning as a
gateway. The Linksys device shouldn't be sourcing frames. The
thought that it is now sending log information is a possibility - the
usage logging has been turned off. I tried turning NAT off but I
believe that Linksys uses NAT in order to allow access to its admin
screen. Turning NAT off caused it to stop responding to it's admin
address. I don't think NAT comes into play unless the WAN port is
used.

I'm speculating that a ping message is being sent to the Linksys
device through the router and it is trying to respond. I'll
experiment later.

Chris

(E-Mail Removed) (Chris) wrote in message news:<(E-Mail Removed). com>...
> "Ron Bandes" <RunderscoreBandes @yah00.com> wrote in message news:<Byf5d.13343$(E-Mail Removed) .net>...
> > "Duane Arnold" <(E-Mail Removed)> wrote in message
> > news:Xns956F55B2C3FA5notmenotmecom@63.240.76.16...
> > > (E-Mail Removed) (Chris) wrote in
> > > news:(E-Mail Removed) om:
> > >
> > >> My configuration has been a DI-604 (wired DLink router) connected to a
> > >> BEFW11S4 v4 (Linksys wireless router) LAN port. The clients that
> > >> connect through the Linksys router need to pass the MAC filter on the
> > >> DLink router. DHCP on the Linksys router has been turned off.
> >
> > I take this to mean that the D-Link router's WAN port connects toward the
> > Internet, and the Linksys router's WAN port is unused.
>
>
> >
> > >> I don't believe that the Linksys AP should be talking to anything -
> > >> nor is it behaving as a router.
> > >
> > > What do you mean by that? Of course, Linksys is communicating with the
> > > gateway router. It may be acting as a switch but it is communicating with
> > > the computers connected to it too.
> >
> > I believe that Chris means that the Linksys switch is not sourcing any
> > frames; it's only passing frames from computers to the D-Link and
> > vice-versa. In that scenario the Linksys's MAC address would never appear
> > in any frame. Apparently the Linksys has begun sourcing frames. If you had
> > started using the Linksys WAN port to connect to the D-Link, then the
> > Linksys would again behave like a router and would source frames. Also, the
> > Linksys may be emailing log entries according to the email parameters in its
> > configuration; perhaps it never had log entries to report before.
> >
> > >
> > > I know on my old 11S4 v1 acting as a switch and connected to the
> > > WatchGuard, the Linksys is configured to be a Router and not a Gateway
> > > through the Linksys Admin screen. Have you done that?
> > >
> > >>
> > >> I have since added the LAN side address to the MAC filter list but
> > >> wanted to know why this began happening.
> > >>
> > >
> > > Maybe, D-link and Linksys don't play well together.
> >
> > Unlikely.
> >
> > > Duane
>
> Yes - the WAN port is unused. Yes - it is not functioning as a
> gateway. The Linksys device shouldn't be sourcing frames. The
> thought that it is now sending log information is a possibility - the
> usage logging has been turned off. I tried turning NAT off but I
> believe that Linksys uses NAT in order to allow access to its admin
> screen. Turning NAT off caused it to stop responding to it's admin
> address. I don't think NAT comes into play unless the WAN port is
> used.
>
> I'm speculating that a ping message is being sent to the Linksys
> device through the router and it is trying to respond. I'll
> experiment later.
>
> Chris


I tried a ping through the DLink router and the Linksys device
responds - though no log message in the DLink. My guess would be that
a ping response does not involve sourcing frames - am I right? In the
meantime, I will continue to block the Linksys from talking to the
DLink. I'd like to determine the cause.

Chris

"Chris" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> (E-Mail Removed) (Chris) wrote in message
> news:<(E-Mail Removed). com>...
>> "Ron Bandes" <RunderscoreBandes @yah00.com> wrote in message
>> news:<Byf5d.13343$(E-Mail Removed) .net>...
>> > "Duane Arnold" <(E-Mail Removed)> wrote in message
>> > news:Xns956F55B2C3FA5notmenotmecom@63.240.76.16...
>> > > (E-Mail Removed) (Chris) wrote in
>> > > news:(E-Mail Removed) om:
>> > >
>> > >> My configuration has been a DI-604 (wired DLink router) connected to
>> > >> a
>> > >> BEFW11S4 v4 (Linksys wireless router) LAN port. The clients that
>> > >> connect through the Linksys router need to pass the MAC filter on
>> > >> the
>> > >> DLink router. DHCP on the Linksys router has been turned off.
>> >
>> > I take this to mean that the D-Link router's WAN port connects toward
>> > the
>> > Internet, and the Linksys router's WAN port is unused.
>>
>>
>> >
>> > >> I don't believe that the Linksys AP should be talking to anything -
>> > >> nor is it behaving as a router.
>> > >
>> > > What do you mean by that? Of course, Linksys is communicating with
>> > > the
>> > > gateway router. It may be acting as a switch but it is communicating
>> > > with
>> > > the computers connected to it too.
>> >
>> > I believe that Chris means that the Linksys switch is not sourcing any
>> > frames; it's only passing frames from computers to the D-Link and
>> > vice-versa. In that scenario the Linksys's MAC address would never
>> > appear
>> > in any frame. Apparently the Linksys has begun sourcing frames. If
>> > you had
>> > started using the Linksys WAN port to connect to the D-Link, then the
>> > Linksys would again behave like a router and would source frames.
>> > Also, the
>> > Linksys may be emailing log entries according to the email parameters
>> > in its
>> > configuration; perhaps it never had log entries to report before.
>> >
>> > >
>> > > I know on my old 11S4 v1 acting as a switch and connected to the
>> > > WatchGuard, the Linksys is configured to be a Router and not a
>> > > Gateway
>> > > through the Linksys Admin screen. Have you done that?
>> > >
>> > >>
>> > >> I have since added the LAN side address to the MAC filter list but
>> > >> wanted to know why this began happening.
>> > >>
>> > >
>> > > Maybe, D-link and Linksys don't play well together.
>> >
>> > Unlikely.
>> >
>> > > Duane
>>
>> Yes - the WAN port is unused. Yes - it is not functioning as a
>> gateway. The Linksys device shouldn't be sourcing frames. The
>> thought that it is now sending log information is a possibility - the
>> usage logging has been turned off. I tried turning NAT off but I
>> believe that Linksys uses NAT in order to allow access to its admin
>> screen. Turning NAT off caused it to stop responding to it's admin
>> address. I don't think NAT comes into play unless the WAN port is
>> used.
>>
>> I'm speculating that a ping message is being sent to the Linksys
>> device through the router and it is trying to respond. I'll
>> experiment later.
>>
>> Chris
>
>
> I tried a ping through the DLink router and the Linksys device
> responds - though no log message in the DLink. My guess would be that
> a ping response does not involve sourcing frames - am I right? In the
> meantime, I will continue to block the Linksys from talking to the
> DLink. I'd like to determine the cause.
>
> Chris

Sniff the traffic between the Linksys and D-Link with a computer running
Ethereal to determine what traffic is coming from the Linksys. You can even
setup a capture filter so that there isn't much data to wade through.

Ron Bandes, CCNP, CTT+

Thank you for the ethereal tip. I setup a capture filter and one
packet arrived every 5 minutes or so. These messages correspond to
what the router was showing on its log.

Will this cause some type of inoperability if I continue to filter?
Or should I enable the MAC addess on the router?


No. Time Source Destination
Protocol Info
1 0.000000 192.168.0.2 224.0.0.1 IGMP
V2 Membership Query

Frame 1 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:0c:41:6f:25:a6, Dst: 01:00:5e:00:00:01
Internet Protocol, Src Addr: 192.168.0.2 (192.168.0.2), Dst Addr:
224.0.0.1 (224.0.0.1)
Internet Group Management Protocol