Unknown Wireless client. How do I identify?

Hi,
I am checking my wireless clients and there's one in there that I don't recognize. I have WPA enabled, and have shut off everything I have that I know of that's wireless and it's still there.
I also checked the airport address and it doesn't appear to match. I don't see anything in Airport that's actually called a MAC address either, and the signal isn't moving when I use other devices.
Is there any sort of terminal command or anything that I can use to identify it? Would the airport show up in the Wireless Clients?
thanks,
Dave

Dave Taylor wrote:
just knowing that it's an apple device is not telling me which apple device. I have several and I've shut off WiFi on all of them, but still this device registers.
Is it possible that even with WiFi/Aiport off that I'm seeing a device?
That MAC assignment page isn't always helpful, but it can let someone identify a device they're not thinking about, such as a Wi-Fi printer or a cell phone "network extender".  Do you have any other networking gear such as an AirPort Express?
A device that's truely off shouldn't appear.  You seem to be aware that just pushing the button at the top of an iPhone doesn't really turn it off.
You might try configuring your AirPort base station for MAC address filtering to see what breaks.

Similar Messages

  • Unknown Wireless Client

    Airport Utility is showing an unknown wireless client. I changed my network wireless password and the client was temporarily gone from the Network. Now in less than a half hour the client is back. It's an Android device and since I don't have any Android devices is this someone hacking my network.

    http://nmap.org/
    Alternatively, there's always the AirPort Utility 5.6 way:
    http://macintoshdesktop.blogspot.co.uk/2012/12/airport-utility-56-and-mountain-l ion.html

  • How to modify Time Capsule wireless clients?

    I have a Time Capsule that I use as the router for the house. We've had a lot of computers connected to it over the years. What I am wanting to know if it is possible to remove wireless clients that are connected or previously connected. Under Finder there is an HP computer that is connected but to my knowledge there is no Windows based computer using the network. At one point there was an old HP laptop connected to it. But for the life of me I can not find anything or figure out how to remove this computer from showing up under the Finder. I am confident that the problem resides at the router because I can see that same device connected.
    http://i.imgur.com/PXdR9XJ.png

    Under Finder there is an HP computer that is connected but to my knowledge there is no Windows based computer using the network.
    Maybe you have an HP printer that is connected either by wireless or Ethernet?
    Does the HP device show up in the list of current wireless clients? If not, then the HP device is connected via Ethernet to your network.
    What I am wanting to know if it is possible to remove wireless clients that are connected or previously connected.
    If a wireless device is already connected to the network, the only way that you can remove it is to change the wireless network password, or set up Timed Access on that device..
    Chaging the password will disconnect all connected devices, then you will have to log on again from each device that you want to connect.

  • 1242AG How to set a password on wireless client

    Listen I wasn't able to get these woking as a Root-Bridge & Non-Root Bridge but was able to get them to work as Root-Bridge with Wireless. Ok I'm out here in the middle of nowhere in Iraq so i say fine just put a password on the wireless client but it seem no matter what I do I cant get to the place to just secure it with a password.
    Please any help much appreciated.
    Thanks
    Danny

    From your query I understand that you are trying to configure some form of authentication for Wireless clients accessing the wireless bridge. Read the following document which explains how to configure the AP/Bridge as a local radius server to authentication clients.
    http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801c0912.shtml

  • Identifying a wireless client

    In the Advanced/Logging and Statistics/Wireless clients window on a TC I can see various lines for my wireless clients - all identified only by the MAC number. I know the identity of all of these except one. Is there a way to get further information about it to help identify it?

    All you can really do is work by process of elimination and look for information on a particular device. For example, you can find the AirPort ID or MAC address of an iPhone by poking around in the settings on the iPhone.
    Every device has a MAC address on a label somewhere on the device.
    Since DHCP leases are issued for a 24 hour period, if you had a wireless device on several hours ago and turned it off, it would still appear in the logs because the lease is still active.  In other words, the logs you are looking at do not necessarily indicate all of the "active" devices that are currently connected to the network at any given time.

  • How do you ADD a Wireless Client PC to your Airport wLan?

    If no security is enabled on the airport extreme 802.11n
    PCs and Macs can get online easily
    As soon as I enable WPA or WPA2
    my macs can get online using the password
    my PCs want a network Key of a specific length and hex format
    and my airport utility app offers a phenomenally long 'equivalent' network password which does not make any of my PCs happy...
    There is also an option of adding a wireless Client (a menu item in the airport utility app) but it closes the page as soon as I click on the menu item - I have NO ACCESS to this feature... something of a bug in airport utility version 5.2.2
    the option is supposed to be add a Client using a PIN or simply add the first client to connect... NEITHER of these features work - the airport util software simply refuses to load that config page!
    what gives?
    how can we solve this?

    Here's a wonderful piece of info that could help all of us...
    Many wLan cards on the PC side don't seem to like WPA2
    so you can resolve that issue by selecting WPA in the Airport utility
    If you are using WPA / WPA2 on the airport extreme
    then... go grab a PC
    yes, I said a PC... ARE YOU LISTENING APPLE?
    on the PC, you need to install the software that came with your Airport Extreme 802.11n... it looks the same as the SW on your trust Mac
    but the thing is, it actually works when you want to ADD a new Wireless Client to your network.
    now... when the PC has the software up and running and you can see your Airport extreme - ADD A WIRELESS CLIENT but don't use the PIN method - that method failed 5 out of 5 times I tried... Use the First Attempt method..
    You will likely get an error but ignore it and go to the wLan connection app in your windows taskbar (bottom right side) you will want to VIEW Wireless Networks available to you.
    If you see your airport, great, click the CONNECT button and the app will ask for your NETWORK KEY
    Just enter your Wireless Password (the same one you used to configure your Airport Wireless Security on the WIRELESS page of the Airport Utility)
    then click connect and voila... all 6 of my PCs were able to access via WPA
    I am stunned that I wasted so much time with this
    and concerned that Apple's software acts differently on the PC allowing me to ADD users whereas the Mac application simply would not load the page
    in case you are wondering I used the following versions for this time wasting exercise
    Mac: Airport Utility v5.2.2
    PC: Apple Airport Utility for Windows v5.0
    gosh what fun this has been
    on the Mac ADDING a wireless Client failed (see my post earlier)

  • How can I set a second Airport Extreme to not allow wireless clients?

    I have two Airport Extremes. One is the main, and one is a remote unit used to extend my wireless network. I only want the remote Extreme to be able to use the LAN ports via ethernet to provide connectivity to my home theater gear. I don't want it to allow wireless clients, even though the two Extremes are wirelessly linked. Is this possible? I know it is on the Express, and I'd like to do that here. Thanks.

    A simple solution might be.......
    Use AirPort Utility 5.6 or earlier and click the Manual Setup option on the extending Extreme.
    Click the Wireless tab below the row of icons
    Wireless Mode should be set to "Extend a wireless network"
    Remove the check mark next to "Allow wireless clients"

  • How do I add a wireless client in Airport Utility V. 6.0?  Option missing?

    I am trying to add a wireless client to my Airport Extreme base station, version 6.0.  In previous versions, there was an option under "Base Station" to add a wireless client, but that seems to have been taken away.  First, why, when it seemed to be the perfect place for it?  Second, where was it moved?  I need to re-add my bridge after a power failure and it is SO frustrating!!

    Suggest that you download and install the more functional AirPort Utility 5.6 for Mac OS X Lion , which was available on the same day as AirPort Utility 6.0. It seems that a number of users have missed this.
    You can keep both 5.6 and 6.0 on your Mac and use the one that you want. But, since 6.0 is now part of the Lion operating system, you cannot delete this application.

  • How to setup Wireless Clients MAC+Active Directory based acess

    Dear Gents,
    I want to setup Wireless Clients MAC+Active Directory based acess on AP 1242 standalone Wireless series .
    Steps i have configured :
    1) SSID manger  under Open authentication : Selected with EAP.
    2) under advacned Radius : s
    MAC Address  Authentication
    MAC Addresses Authenticated by:
    Authentication Server Only
    3) Server Manger : Current server list
    added the radius ip address 10.1.200.x
    EAP  Authentication
    MAC  Authentication
    Accounting
    Priority  1:  < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
    Priority  1: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
    Priority  1: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
    Priority  2:  < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
    Priority  2:  < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
    Priority  2:  < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
    Priority  3:  < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
    Priority  3:  < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
    Priority  3: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
    From ACS - Radius  we have choose a Group x( named as Mac-address group )
    All the wireless Client ( laptops ) mac-address are added as add username option and enter username
    as mac-address & enter the mac-address as pwd second option of password TAB.

    Hi Akber,
    I think you didnt understood what i was trying to say here :-( No problem..I will explain my theory again.Your requirment is to autheticate user from ACS internal database (you have already added the MAC address as the username on your ACS internal database) as well as from ACS external database (in your case this is AD).
    What i was saying is when when authetication request comes to raidus server it checks its internal database and if it find a valid username and password (here it will the MAC address and password which you have entered to the ACS database) the ACS will not query the external database (in your case the AD) for authetication.
    You can not have ACS to look in to both MAC and AD database at the same time.
    Hope this clears your doubt.
    Regards
    Najaf

  • How to look up a wireless client via MAC address

    One of my AirPort Expresses shows a wireless client whose MAC address I don't recognize. Is there some utility that will show me info (manufacturer, etc) of a wireless MAC address?
    Also, under what conditions would one choose to set up the Wireless Mode of an AirPort Express (Extreme) to "Extend a wireless network" and when would you choose "Participate in a WDS network"? The help files don't explain this stuff very well.

    If the "g" Express is set to "join", it does not extend the wireless signal, it receives the wireless signal as if it were a computer. The idea behind "join" was to provide a means for users to stream AirTunes to a remote location with an amplifier and speakers.
    If you are not using it to stream AirTunes, there's really no reason to have it powered on. As you have probably discovered, the ethernet port on the "g" Express is not active.
    You'll need to recheck some settings on your main base station, the Extreme to make sure that it is setup correctly. Open AirPort Utility, click Manual Setup and click the Wireless tab below the icons. Just make sure that there is a check mark next to "Allow this network to be extended". Update to save any changes.
    The "n" Express should be configured using AirPort Utility, Manual Setup, Wireless tab. Check that your Wireless Mode is "extend a wireless network" and make sure there is a check mark next to "allow wireless clients".
    As you have discovered, the ethernet port is also active on the "n" Express when you have it set to "extend" and it will also stream AirTunes. Great features on the "n" Express.
    You might think about adding another "n" Express to extend to another area.
    Ethernet is always the best choice for speed and stability if you are able to hide the wire through the house. If it's not feasible to run an ethernet cable, take a look at ethernet powerline adapters.
    You would use a pair, one device at the Extreme end and one at the other end where you want the signal to go. These devices use the home wiring to transport an ethernet signal and they work very well. Not quite as good as straight ethernet, but close and far better than wireless overall.
    I bought a pair from DirecTV to setup the On Demand service because I didn't want to crawl through a hot attic to run an ethernet cable from my office router to the DVR. Much faster than wireless...and I previously had a very good wireless connection between my Time Capsule and the Express I was using to extend.
    Hope you get things figured out soon.

  • Wireless Client List keeps getting strange addresses

    I am having some issues with the wireless client list in my Linksys E3000 wireless router. I want to use the wireless client list and enter the MAC addresses of the devices that I want to have access. Any where from 5 minutes to a couple days, more MAC's have been added to the list, from devices that don't off hand belong there (not mine). Sometimes, some of the devices that I have put there, will be removed and replaced with the others. Those that are replaced then do not have access. There are about 18 common MAC's that show up.
    As an experiment, after many times of replacing these stray MAC's, I tried putting all of the stray MAC's in and restricting them from access. That was good for about 24 hours and the list was misteriously deleted from the restricted list. There is no common thread between time or devices connected.
    The following is a list of devices as they appear. Most will reappear after being deleted from the list:
    0A:60:76  Unknown
    00:FF:30  Unknown
    00:25:F0 Suga Electronics Limited
    00:1F:16 Wistron Corporation
    70:1A:04 Liteon Tech Corp.
    0C:60:76 Hon Hai Precision Ind. Co.,Ltd.
    00:1F:16 Wistron Corporation
    70:1A:04 Liteon Tech Corp.
    00:26:22 COMPAL INFORMATION (KUNSHAN) CO., LTD.
    08:00:27 cadmus computer systems
    90:E6:BA ASUSTek COMPUTER INC.
    00:23:CC Nintendo Co., Ltd.
    00:16:44 Liteon Tech Corp.
    F0:B4:79  Unknown
    00:1E:8C ASUSTek COMPUTER INC.
    00:26:9E Quanta Computer Inc
    08:00:27 cadmus computer systems
    00:10:75 Maxtor Corp. (was: creative design solutions,inc.)
    I have assigned IP's to the devices that I want connected.
    I have reset to factory settings.
    I have the current firmware. I even reinstalled the current firmware.
    I have scanned for viruses and malware.
    I am using WPA2 security.
    The only hardwired computer that I am on now is running Windows 7. All other computers are running W7. All computers are up to date. All antivirus and malware soft is up to date. All other devices, (cameras, drives, printers, etc.) have firmware up to date.
    Any suggestions?

    Here is the issue:
    If I use Permit, MAC's are added to the list which eventually fills up and starts knocking off the one's that I want there.
    If I use Prevent, the MAC's that have appeared in the Permit list will start disappearing from the Prevent list.
    I have WPA2 Personal encryption on. Remote access turned off.
    If I have the Prevent list on with Remote access off, how are these stray MAC's being removed.
    If I have the Permit list on with Remote access off, how are these MAC's being added and removing the correct one's.

  • Wireless Sniffing - How to get to see the Payload?

    Hello everybody. Im now trouble shooting a wireless problem. So i wannt to sniff the traffic from the device.
    what ive done so far:
    -set up a AP in sniffing mode
    -redirected the traffic to my client.
    -sniffing the traffic
    i cann see the traffig on wireshark. but i cannot see the payload.
    i should see the DHCP request and so on. but i cannot see this informations in wireshark.
    all i see is source mac (my device) destination mac - broadcast.
    i did it just like the how to told me to:
    https://supportforums.cisco.com/docs/DOC-19214
    what am i missing?
    Thank You
    Chris

    I seem to be seeing the same issue ; seeing sniffed mcast/broadcast packets from wireless clients - no unicast.
    WLC is running 7.5.10.12 using (2) 3602s, 1 AP inFlexC mode, the other in sniffer mode.
    I've tried using both 5G and 2.4G radios, making sure both clients and both APs are all matched.
    I even used dropped that to only 2.4 and the available RF rates to max of  11M - the behavior never changes.
    Using wireshark 1.10.5
    Decoding packets as PEEKREMOTE.
    Have set unset CAPWAP/LWWAP "swap control bit" - no difference
    Enabled disabled CAPWAP "Cisco wireless controller support" - no difference
    Perhaps a wireshark dissector issue? I'm seeing many/larger frames in these captures all decoded as:
    IEEE 802.11 Unrecognized (Reserved frame), Flags: .........
    Type/Subtype: Unknown (0x36)
    Frame Control Field: 0x6c00
    Curious if others with similar setup have this working correctly or not - ?

  • Understanding of wireless client connection to multiple APs

    Hello,
    I would like to know how do wireless clients connect to APs
    For e.g. if in a single floor square office space - wireless network with multiple APs exists on the same SSID, how do clients decide which AP to connect to. For e.g. the client may get similar strength signals from two APs close to each other (such as Excellent). Which AP does client connect to.
    Secondly, how does the load distribution take place. For e.g. if on one AP, 10 clients connect and on the other AP, 20 clients connect, how can equal load distribution be acheived, that is 15 on each AP without the tiring MAC filtering configurations.
    Thirdly, is there something like number of user/connection restrictions on APs. I have gone through some AP manuals and did not find any such specifications like max. # of users = 20 etc. Currently we are using D-Link AP and have noticed that once the # of connections go upto 20, performance reduces heavily such as the latency on gateway pings go upto 1000-2000ms.
    Fourthly, how can I identify from the client to which AP it is connected.
    Thanks.

    I would like to know how do wireless clients connect to APs
    For  e.g. if in a single floor square office space - wireless network with  multiple APs exists on the same SSID, how do clients decide which AP to  connect to. For e.g. the client may get similar strength signals from  two APs close to each other (such as Excellent). Which AP does client  connect to.
    ANS - Its first come first serve... however.. sometimes if we have multiple SSIDs one with open auth and no encryption and other fuly protected.. then the client wil connect to the open rather the secured on.
    Secondly, how does  the load distribution take place. For e.g. if on one AP, 10 clients  connect and on the other AP, 20 clients connect, how can equal load  distribution be acheived, that is 15 on each AP without the tiring MAC  filtering configurations.
    ANS - MAC is a good option but apart from that.. i have seen somewhere but not able to remember the command which will limit the number of clients per radio..
    Thirdly, is there  something like number of user/connection restrictions on APs. I have  gone through some AP manuals and did not find any such specifications  like max. # of users = 20 etc. Currently we are using D-Link AP and have  noticed that once the # of connections go upto 20, performance reduces  heavily such as the latency on gateway pings go upto 1000-2000ms.
    ANS - AP can take upto 2048 MAC addresses.. its recommended not to have more than 24 clients per AP..
    Fourthly, hw can I identify from the client to which AP it is connected.
    ANS -If the clients are CCX compatible and aironet extentions enabled on the AP. then the command "show dot11 ass" will tell the clients connecting to which AP.. the AP name will get displsayed in the output..
    Regards
    Surendra

  • Can I use ASA to be a DHCP Server use in WLC wireless Client

    I want to use ASA to be a DHCP Server for Wireless Client not it can't.
    I check the debug log in WLC, I confirm the WLC have send the request to ASA.
    In the ASA, it don't have any hits in the rule when the WLC send the DHCP relay request.
    I have try don't use dhcp relay in WLC but don't success. Anybody have the same case with me? And Is the ASA can't support DHCP relay agent to request to get the IP Addr.
    P.S. In the Network Design limitation so I can't use WLC to be DHCP Server.
    Equipment:
    ASA5510
    WLC4402
    How can I fix it.
    Thank you very much

    The issue is that the ASA doesn't accept DHCP requests from a relay agent, only broadcast DHCP requests. In the 4.2 version for the controllers there is now an option so you can change the way the controller forwards DHCP requests so that it is sent as a broadcast and not from a relay agent.

  • Unable to set up base station as wireless client

    I have a network with one Airport Extreme (UFO-shape) and three Airport Express base stations. Now I had to do a hard reset of all the base stations, and want to use Airport utility to set up the network again.
    I have no problems setting up the Airport extreme as the main base station, and the first Airport express as a remote base station (extending the network). I want to set up the other two Airport Express stations as wireless clients (I only use them for iTunes via Airtunes).
    My problem is that when I reach the point where I can choose between setting them up to either extend the network or as a wireless client, I am not able to proceed if I choose the latter (nothing happens when I press "continue"). I can only go through the setup process if I choose the Airport Express to be an extension of the network (a remote base station).
    For one of the Airport express, I then later manually changed the setup from "be a part of a WDS network" to "connect to a wireless network". But when I try this for the last Airport Express, I am no longer able to contact the base station if I try to do the same. I have chosen channel 11 for the network, and I think in some way or another, after I manually change the settings for the last Airport express, it switches to another channel. After this I can no longer read the base station configuration or connect to it via airtunes.
    When I do a hard reset again, and go through the process once more, everything is OK as long as I keep it as a remote base station. But I really would like it to be connected as a wireless client
    Any ideas?

    The basic wiring setup would include connecting an Ethernet cable from one of the available LAN <-> Ethernet ports to the WAN "O" port on the Time Capsule.
    You can run an Ethernet cable up to 100 meters or 300+ feet so the trick will be locate the Time Capsule in the middle of the area where you need more wireless signal coverage.
    To have the Time Capsule "extend" the wireless from the gateway, you would need to configure it to create a new wireless network using the same wireless network name, same wireless security setting and same password as the gateway's wireless network.
    The final configuration step would be to make sure that the Time Capsule is setup to operate in Bridge Mode, so that it will function as a client for the gateway router.
    The specifics of how to do this will depend on the version of AirPort Utility that you are using on your Mac. Post back if you need more details on this.

Maybe you are looking for