Client IP detected 8 times a minute in Wifi logs

[JasonX]

Android tablet showing up in wifi logs 8x per minute with "client ip detected" by Fortiap in home lab stack. Other devices including other android tablets "check in" maybe once every day or two. Tablet works fine and stays connected to wifi. Is there some setting in my SSID or gate or tablet that should be changed and any idea what is causing this constant behavior? Using 2.4Gz band. Hyper vigilant because of malicious activity from neighbour

[Anthony_E]

Hello Jason,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Jean-Philippe_P]

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

[Jean-Philippe_P]

Hello again JasonX,

I found this solution. Can you tell me if it helps, please?

This behavior could be due to several factors. Here are some steps to troubleshoot and potentially resolve the issue:

1. Check Tablet Settings: Ensure that the tablet's Wi-Fi settings are not set to aggressively scan for networks or maintain a constant connection. Look for settings related to Wi-Fi optimization or power-saving modes.
   
   
2. Review SSID and Security Settings: Verify that the SSID and security settings on the FortiAP are correctly configured. Ensure that the security settings (e.g., WPA2) are consistent with other devices that are not exhibiting this behavior.
   
   
3. Examine Network Traffic: Use a packet sniffer to analyze the network traffic from the tablet. This can help identify if there are any unusual patterns or frequent requests being made by the device.
   
   
4. Check for Interference: Since you are using the 2.4 GHz band, check for potential frequency interference from other devices. Consider switching to a less congested channel or the 5 GHz band if possible.
   
   
5. Update Firmware and Drivers: Ensure that the FortiAP firmware and the tablet's Wi-Fi drivers are up to date. Updates can resolve bugs that might cause such behavior.
   
   
6. Monitor for Rogue Devices: Given your concern about malicious activity, ensure that rogue device detection and suppression are enabled on your FortiAP.
   
   
7. Debugging:
   - Enable client debugging on the FortiAP for the specific tablet to gather more detailed logs. Use the command: ` diagnose wireless-controller wlac sta_filter <tablet MAC address> 2 `
   - This will help you see the connection handshake and any anomalies.

By following these steps, you should be able to identify the cause of the frequent "client IP detected" logs and take appropriate action.