NETGEAR has identified that a particular multicast packet from some third party wireless access points can leak through fully converged STP topologies on some of our fully managed and smart managed switches. This multicast packet has a destination MAC address of 01:80:c2:00:00:1c.
If your switch is affected by this issue, you should first check to see if the problem is resolved in the latest firmware for your switch. You can find the latest firmware version on our support site at https://www.netgear.com/support.
If a firmware fix is not available, you can work around the problem by using a MAC ACL to filter out the multicast packet at the port(s) where the access point(s) are connected. Follow the steps below to create and apply a MAC ACL.
- Log on to the admin page of the switch.
- Go to Security - ACL.
- Under Basic, click on MAC ACL.
- In the Name field, type a name for the ACL and click Add.
- Click on MAC Rules.
- In the ACL Name drop down menu, select the ACL that you created in step 4.
- Create the first MAC Rule as follows:
Sequence Number: 1
Action: Deny
Match Every: False
Destination MAC: 01:80:c2:00:00:1c
Destination MAC Mask: 00:00:00:00:00:00
Other fields should remain blank.
- Click Add.
- Create the second MAC Rule as follows:
Sequence Number: 2
Action: Permit
Match Every: True
Other fields should remain blank.
- Click Add.
- Click MAC Binding Configuration.
- In the ACL ID drop down list, select the ACL that you created in step 4.
- Ensure that Direction is set to Inbound.
- Apply the ACL to the port(s) where the access point(s) are connected by clicking on those ports.
- Click Apply when done.
Last Updated:07/07/2025
|
Article ID: 000038810