cancel
Showing results for 
Search instead for 
Did you mean: 

Disconnects on AP230 and AP 250 running 10.5.r3 and 10.5.5. Seeing massive UDP Floods on variety

Disconnects on AP230 and AP 250 running 10.5.r3 and 10.5.5. Seeing massive UDP Floods on variety

Tamizpa
New Contributor

Receiving following type of messages in AP below.   Users are being disconnected and blocked for 3600 seconds.   Coming from IOS and Windows laptops.   Upgraded all firmware, turned on WIPS, When one of these disconnects happens, other in area stop talking to AP, and can't connect to the various SSID.   Classrooms are unable to connect, or they get disconnected.  I reset the AP back to factory default and it starts working.   Next step will be to take a packet capture but wondering if anyone had any other ideas?  

04-17 13:47:35 err kernel: wl 0000:01:00.0 wifi0: (WE) : Wireless Event (cmd=0x8C02) too big (4233)
2023-04-17 13:37:59 alert kernel: [screen]: wifi1.2: UDP flood was detected from station 6e9c:dacd:72c4 at (10.220.32.176). The station will be banned for 3600 seconds.
2023-04-17 13:19:10 err last message repeated 2 times
2023-04-17 13:18:59 err kernel: wl 0000:01:00.0 wifi0: (WE) : Wireless Event (cmd=0x8C02) too big (8054)
2023-04-17 13:18:42 err kernel: wl 0001:01:00.0 wifi1: (WE) : Wireless Event (cmd=0x8C02) too big (8054)
2023-04-17 13:18:42 err kernel: wl 0000:01:00.0 wifi0: (WE) : Wireless Event (cmd=0x8C02) too big (8054)
2023-04-17 13:17:20 alert kernel: [screen]: wifi1.2: UDP flood was detected from station 38de:adc2:1131 at (10.220.36.254). The station will be banned for 3600 seconds.
2023-04-17 13:16:21 alert kernel: [screen]: wifi1.4: UDP flood was detected from station d262:1717:d065 at (10.220.65.242). The station will be banned for 3600 seconds.
2023-04-17 12:33:12 err kernel: wl 0001:01:00.0 wifi1: (WE) : Wireless Event (cmd=0x8C02) too big (43417)
2023-04-17 12:30:19 err kernel: wl 0000:01:00.0 wifi0: (WE) : Wireless Event (cmd=0x8C02) too big (43417)
2023-04-17 12:29:44 err kernel: wl 0000:01:00.0 wifi0: (WE) : Wireless Event (cmd=0x8C02) too big (32825)
2023-04-17 12:28:51 err kernel: wl 0001:01:00.0 wifi1: (WE) : Wireless Event (cmd=0x8C02) too big (43417)
2023-04-17 12:21:55 alert kernel: [screen]: wifi1.4: UDP flood was detected from station fa6e:9323:69de at (10.220.66.27). The station will be banned for 3600 seconds.
2023-04-17 12:07:38 alert kernel: [screen]: wifi1.2: UDP flood was detected from station 38de:ad09:c0f4 at (10.220.37.26). The station will be banned for 3600 seconds.
2023-04-17 12:07:10 alert kernel: [screen]: wifi1.4: UDP flood was detected from station 38fc:98f4:dfc1 at (10.220.68.241). The station will be banned for 3600 seconds.
2023-04-17 11:50:58 alert kernel: [screen]: wifi1.2: UDP flood was detected from station 38fc:98f4:dfc1 at (10.220.34.152). The station will be banned for 3600 seconds.
2023-04-17 11:37:04 alert kernel: [screen]: wifi1.2: UDP flood was detected from station a2ad:d523:267c at (10.220.33.152). The station will be banned for 3600 seconds.
2023-04-17 11:29:18 err kernel: wl 0001:01:00.0 wifi1: (WE) : Wireless Event (cmd=0x8C02) too big (42803)
2023-04-17 11:29:14 err kernel: wl 0000:01:00.0 wifi0: (WE) : Wireless Event (cmd=0x8C02) too big (42803)
2023-04-17 11:28:42 alert kernel: [screen]: wifi1.2: UDP flood was detected from station a4e9:755e:b2c8 at (10.220.37.35). The station will be banned for 3600 seconds.
2023-04-17 11:28:31 alert kernel: [screen]: wifi1.2: UDP flood was detected from station c42a:d0d3:5b9f at (10.220.35.149). The station will be banned for 3600 seconds.
2023-04-17 11:14:18 err kernel: wl 0000:01:00.0 wifi0: (WE) : Wireless Event (cmd=0x8C02) too big (20178)

0 REPLIES 0
GTM-P2G8KFN