• March 28, 2024, 07:45:03 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Hijacking my home wireless network by intercepting DHCP requests  (Read 16276 times)

fumbledore

  • Level 1 Member
  • *
  • Posts: 3

I have a dual-mode WLAN AP using SSID2.4 (for 2.4 GHz band) and SSID5 (for 5 GHz band). My home network is configured using subnet 192.168.2.x/24 with the AP (192.168.2.1) configured as the gateway and as the DHCP and DNS servers.

My DAP-1520 is configured to use SSID2.4-EXT for the extended 2.4 GHz band and SSID5-EXT for the extended 5 GHz band (as per default DAP-1520 settings).

Most of my non-TV wireless devices are configured to use (the non-extended) SSID2.4 connection directly to my AP. My wireless-enabled TV is configured to use (the extended) SSID5-EXT connection via the DAP-1520.

When I first plug-in the DAP-1520, everything works well. But shortly thereafter (minutes), my non-TV wireless devices lose access to the Internet even though they report that they still have a connection to SSID2.4; two things are happening:

- first, the default DNS server has been changed to 192.168.0.50 -- the default IP address of the DAP-1520. I have also had this happen to a desktop with a wired Ethernet connection to my home network.

- second, the device may have been assigned an address in the 192.168.0.x/24 subnet -- the default subnet of the DAP-1520 but not the subnet of my home network. At this point, my devices have also been configured with 192.160.0.50 (the DAP-1520) as the default gateway.


In other words, the DAP-1520 appears to be trying to operate as a stand-alone AP rather than a simple range extender and is hijacking my home wireless network by intercepting DHCP requests.

I have tried forcing the DAP-1520 to use a static IPv4 address and configuration (rather than acquiring its configuration through DHCP) but that doesn't fix the problem either.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Hijacking my home wireless network by intercepting DHCP requests
« Reply #1 on: April 30, 2014, 07:19:54 AM »

Link>Welcome!

  • What Hardware version is your router? Look at sticker under router.
  • Link>What Firmware version is currently loaded? Found on the routers web page under status.
  • What region are you located?

When installing the 1520, did you use the set up wizard to install the DAP and use the Extender mode?

What Mfr is the main host router?
Is the main host router using it's own DNS server or letting DNS from the ISP pass thru?
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

fumbledore

  • Level 1 Member
  • *
  • Posts: 3
Re: Hijacking my home wireless network by intercepting DHCP requests
« Reply #2 on: May 01, 2014, 07:51:59 PM »

Link>Welcome!

  • What Hardware version is your router? Look at sticker under router.
  • Link>What Firmware version is currently loaded? Found on the routers web page under status.
  • What region are you located?

When installing the 1520, did you use the set up wizard to install the DAP and use the Extender mode?

What Mfr is the main host router?
Is the main host router using it's own DNS server or letting DNS from the ISP pass thru?

- hardware version 1A
- firmware version 1.00
- region North America
- setup via 1520 configuration built-in web page (no wizard)
- primary AP Netgear N600
- primary AP advertises itself as the DNS server via DHCP
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Hijacking my home wireless network by intercepting DHCP requests
« Reply #3 on: May 02, 2014, 08:24:59 AM »

You might try setting up the DAP using the wizard to set up the extender mode of the DAP. You can review this in the User Manual on page 18 and there is more info on page 33 for Extender mode settings.

What wireless modes are you using on the main host router? G and N or single modes?




Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

fumbledore

  • Level 1 Member
  • *
  • Posts: 3
Re: Hijacking my home wireless network by intercepting DHCP requests
« Reply #4 on: May 02, 2014, 06:28:03 PM »

You might try setting up the DAP using the wizard to set up the extender mode of the DAP. You can review this in the User Manual on page 18 and there is more info on page 33 for Extender mode settings.
That's essentially what I did, although I entered the security key manually (page 28). In the advanced network settings (page 29), I also tried both dynamic (DHCP) and static configurations. I had the same problem regardless.

What wireless modes are you using on the main host router? G and N or single modes?
N single mode for both 2.4 GHz and 5 GHz bands.
-------------

One possible area to look at is the way that the dual band extension is implemented. You can only choose one channel to act as the link to the main router (page 27). In my case, I chose the 5 GHz channel (SSID5) which I have on channel 36.

The 5 GHz channel is extended in-band -- i.e. both the main router (SSID5) and the DAP (SSID5-EXT) use this channel -- which is pretty standard for a simple, transparent range extender.

However, the DAP does not extend the 2.4 GHz channel in-band -- it chose an "unoccupied" (low interference) channel for the 2.4 GHz band (channel 11 for SSID2.4-EXT instead of the channel 3 that my router is using for SSID2.4) and appears to backhaul the 2.4 GHz traffic on channel 11 over the 5 GHz channel 36 as well.

So, in the 2.4 GHz band, it looks more like another AP than an extended channel ... which are also the symptoms of my problem.

The DAP-1520 looks like it is based on software for a full AP that has been "dumbed down" via configuration options to an extender. I guess it is getting its roles confused somewhere :-}

I would like to be able to disable the 2.4 GHz but I am told that can't be done. I am also not able to choose the 2.4 GHz channel used by the DAP for SSID2.4-EXT; it selected this channel (11) automatically.
« Last Edit: May 02, 2014, 06:29:58 PM by fumbledore »
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Hijacking my home wireless network by intercepting DHCP requests
« Reply #5 on: May 03, 2014, 02:46:45 PM »

Hmmm, ya I'm not sure if you can extend both freq radios with this unit. It maybe only one a time.

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email. Ask for level 2 or higher support. This is a new product and there could be some bugs in it or just a configuration issue.

Please let us know if you find out anything please...
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

Kakashi::.

  • Level 3 Member
  • ***
  • Posts: 270
Re: Hijacking my home wireless network by intercepting DHCP requests
« Reply #6 on: May 05, 2014, 07:38:13 PM »

Gents,

I could not help noticing that the unit is still running F/W version 1.00, any way we can try upgrading it to the latest code?
Visit http://support.dlink.com/dap-1520 and download the new firmware.
The latest code is v1.02b04 and you can click Here to see the release notes.

Hope this helps fix the issue you are seeing. 
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Hijacking my home wireless network by intercepting DHCP requests
« Reply #7 on: May 05, 2014, 07:42:51 PM »

Thanks for the suggestion Kakashi.

Please follow this for updating FW and let us know if this fixes this issue please:
FW Update Process
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Hijacking my home wireless network by intercepting DHCP requests
« Reply #8 on: May 09, 2014, 09:27:01 AM »

Any status on this?  ???

That's essentially what I did, although I entered the security key manually (page 28). In the advanced network settings (page 29), I also tried both dynamic (DHCP) and static configurations. I had the same problem regardless.
N single mode for both 2.4 GHz and 5 GHz bands.
-------------

One possible area to look at is the way that the dual band extension is implemented. You can only choose one channel to act as the link to the main router (page 27). In my case, I chose the 5 GHz channel (SSID5) which I have on channel 36.

The 5 GHz channel is extended in-band -- i.e. both the main router (SSID5) and the DAP (SSID5-EXT) use this channel -- which is pretty standard for a simple, transparent range extender.

However, the DAP does not extend the 2.4 GHz channel in-band -- it chose an "unoccupied" (low interference) channel for the 2.4 GHz band (channel 11 for SSID2.4-EXT instead of the channel 3 that my router is using for SSID2.4) and appears to backhaul the 2.4 GHz traffic on channel 11 over the 5 GHz channel 36 as well.

So, in the 2.4 GHz band, it looks more like another AP than an extended channel ... which are also the symptoms of my problem.

The DAP-1520 looks like it is based on software for a full AP that has been "dumbed down" via configuration options to an extender. I guess it is getting its roles confused somewhere :-}

I would like to be able to disable the 2.4 GHz but I am told that can't be done. I am also not able to choose the 2.4 GHz channel used by the DAP for SSID2.4-EXT; it selected this channel (11) automatically.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

jtjxht

  • Level 1 Member
  • *
  • Posts: 1
Re: Hijacking my home wireless network by intercepting DHCP requests
« Reply #9 on: December 13, 2014, 08:06:06 PM »

Hi,

My office D-Link (Dlink DAP-1520 ) also face this problem.
Is there any update on this?
Or can I get a refund back?

Thanks.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Hijacking my home wireless network by intercepting DHCP requests
« Reply #10 on: December 14, 2014, 12:36:41 PM »

Link>Welcome!

  • What Hardware version is your router? Look at sticker under the router case.
  • Link>What Firmware version is currently loaded? Found on the routers web page under status.
  • What region are you located?

Internet Service Provider and Modem Configurations
  • What ISP Service do you have? Cable or DSL?
  • What ISP Modem Mfr. and model # do you have?

Hi,

My office D-Link (Dlink DAP-1520 ) also face this problem.
Is there any update on this?
Or can I get a refund back?

Thanks.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.