DHCP lease dubplicate errors.

Darkanyons

Or the IPs are being handed out VIA DHCP so each time a previously known MACs IP is changed for some reason, you will see that also.

Thank you.
Can this scenario result in duplicate lease errors?

@kejianshi:

If you see the same MAC used simultaneously and switching back and forth alot its probably been spoofed. This is an unsercure, unencryped wifi?

On the logs the mac-changing-errors occurred on the same time. Yes this is unsecured and unencrypted wifi.

kejianshi

If its unsecure, there, yes. More than likely someone is using a simple packet sniffer and has a record of all the MACs in use on your system. This would be very easy for them to get on an unsecure wifi. Hacking wifi is like a national sport there.

Darkanyons

waaaaaa…........................ I'll be damned if this is happening here too.

The log above just shows that the macs have been cycling on just three addresses:
34:6b:d3:4c:d0:26 = MAC address 346BD3 Company Huawei
94:db:c9:0e:23:82 = MAC address 94DBC9 Company Azurewave
8c:a9:82:ac:fc:50 = MAC address 8CA982 Company Intel Corporate

I'm wondering how to make this public hotspot more secure. should i migrate away from PFs' Captive portal?

kejianshi

Use captive portal with WAP2.

This way, in the future, a person standing to the side can't sniff the unencrypted packets, get your MACs then use the MACs to get a free ride on your wifi.
It won't prevent one of your customers from sharing the WPA2 key though if they purposely want to do that.