Intrusion Prevention System Problem

Intrusion Prevention System Problem

Intrusion Prevention System Problem
Intrusion Prevention System Problem
Thursday
Model: Archer AX6000  
Hardware Version: V1
Firmware Version: 1.4.3 Build 20250725 rel.18118(5553)

I bought a brother printer dcp-t730dw last year, around may, and i started having issues with the intrusion prevention system as it shows in the uploaded image and i cant use my printer properly, i thought that in the next firmware update it was about to be solved, but nothing, till today i have this problem, 192.168.0.206 is my printer ip, i will appreciate if you could help me with that, i already tried white listing, mac and binding, but didnt worked.img1

  0      
  0      
#1
Options
5 Reply
Re:Intrusion Prevention System Problem
Thursday

  @Pablo_Martinez 

 

 

Something's wrong with your IP address settings:

 

 

At least two different devices are receiving the same IP address as your printer in question (192.168.0.206).

If you're trying to bind the printer MAC address to a particular IP address use the address reservation feature (not IP & MAC binding) if you've set your printer to receve its IP address by DHCP.

Alternativly you can set the printer with a static IP address ( 192.168.0.206 ) and use DHCP range on your router from 192.168.0.100 to 192.168.0.200 only.

Then whitelist the device with IP address 192.168.0.206 (this should be your printer).

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
  0  
  0  
#2
Options
Re:Intrusion Prevention System Problem
Friday

  @terziyski the white list worked this time, this is the only fix for this? im saying that cause im not always at home to set devices to the white list, here is a more detailed info about 1

  0  
  0  
#3
Options
Re:Intrusion Prevention System Problem
Friday - last edited Friday

  @Pablo_Martinez 

 

From your screenshot it appears that a device in your LAN is querying your router via SNMP protocol and the router thinks that it's an actual threat.

That's not an actual threat - SNMP (Simple Network Managemnt Protocol) uses a UDP port 161 to gather system information from devices in a network.

And again you have two different devices receiving the same IP address from your router:

 

 

You have to fix you IP addressing scheme, like you did for your printer, so any device would get the same IP address, every time it connects to your router.

Once you did that, you'll see which device is actually causing this issue and whitelist it once and for all.

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
  0  
  0  
#4
Options
Re:Intrusion Prevention System Problem
Friday - last edited Friday

  @Pablo_Martinez so i checked every device, as the image shows they have unique ips, 192.168.0.38 and 192.168.0.43 respectively, 192.168.0.207 is my printer ip and is set as static, also in the past image it shows as iphone and  desktop because those are the devices that im using for the printer in that moment , when i tried to connect using my iphone it showed  the message that im receving an attack from 192.168.0.207(my printer), the same for my desktop.2

  0  
  0  
#5
Options
Re:Intrusion Prevention System Problem
Friday

  @Pablo_Martinez 

 

In your first post you mentioned that 192.168.0.206 is the IP address of your printer.

Can you describe your network topology, e,g, do you have more than one router in your LAN, any ISP modem.router present, etc.

Is there any devices in your LAN which are configured with a static IP addresses ?

Post a screenshot of your router DHCP server settings and DHCP Address Reservation table .

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
  0  
  0  
#6
Options