ER605 WAN Port leaks MAC Addresses

ER605 WAN Port leaks MAC Addresses

ER605 WAN Port leaks MAC Addresses
ER605 WAN Port leaks MAC Addresses
a week ago - last edited a week ago
Tags: #NAT #MAC Addresses
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version: 2.2.6

My ER605 v2 router is leaking off MAC addresses in addition to its primary address. The result is that my ISP's Cisco router is shutting my ISP-side port down for 10 minutes with an "Ethernet switch has detected an excess number of MAC addresses" error. This happens 2 to 4 times a day (anytime my interface shows more than 2 different MAC addresses). In speaking with the ISP, they cited a history of highly unusual MAC addresses -- in addition to my 48:22:54:xx:xx:2C address. Examples of BAD MAC addresses which the ISP has observed include:

 

  • 40:BB:A9:21:00:35 
  • 40:BB:xx:xx:xx:xx
  • 34:60:xx:xx:xx:xx
  • E0:00:xx:xx:xx:xx
  • C0:A8:xx:xx:xx:xx
  • and more... with values all over the place (none align to the 9 devices I have on my internal network - they don't even map to known manufacturers)

 

Note that I am only using IPv4 (IPv6 is disabled). I spoke directly to one of the ISP's senior network engineers (as that is my own background as well). They went on to say they have seen this issue with other TP-Link routers - and its one of the reasons they stopped giving these routers (not sure which models) to customers. 

 

What is going on? I've seen other conversations on the TP-Link community with NO resolution:

 

 

My ER605 WAN port is connected directly to the ISP's WAN port (we're in a high-rise with Fiber optic to each floor).

I have the latest firmware... Can we please get a fix for this??  Thank you.

 

 

 

 

 

 

  0      
  0      
#1
Options
1 Reply
Re:ER605 WAN Port leaks MAC Addresses
a week ago

Hi @Les1 

Thanks for posting in our business forum.

Les1 wrote

My ER605 v2 router is leaking off MAC addresses in addition to its primary address. The result is that my ISP's Cisco router is shutting my ISP-side port down for 10 minutes with an "Ethernet switch has detected an excess number of MAC addresses" error. This happens 2 to 4 times a day (anytime my interface shows more than 2 different MAC addresses). In speaking with the ISP, they cited a history of highly unusual MAC addresses -- in addition to my 48:22:54:xx:xx:2C address. Examples of BAD MAC addresses which the ISP has observed include:

 

  • 40:BB:A9:21:00:35 
  • 40:BB:xx:xx:xx:xx
  • 34:60:xx:xx:xx:xx
  • E0:00:xx:xx:xx:xx
  • C0:A8:xx:xx:xx:xx
  • and more... with values all over the place (none align to the 9 devices I have on my internal network - they don't even map to known manufacturers)

 

Note that I am only using IPv4 (IPv6 is disabled). I spoke directly to one of the ISP's senior network engineers (as that is my own background as well). They went on to say they have seen this issue with other TP-Link routers - and its one of the reasons they stopped giving these routers (not sure which models) to customers. 

 

What is going on? I've seen other conversations on the TP-Link community with NO resolution:

 

 

My ER605 WAN port is connected directly to the ISP's WAN port (we're in a high-rise with Fiber optic to each floor).

I have the latest firmware... Can we please get a fix for this??  Thank you.

 

 

 

 

 

 

ER605 WAN to ISP WAN? Aren't you supposed to connect to another port and make that port become passthrough or set your ISP device into bridge mode?

 

No follow-up regarding this issue, so there is no solution or fix. We have not located the reason. If you can offer remote access to your problematic environment, we can give it a try.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#2
Options