get ip address from mac address

[teckn1k]

I got a Level One Access Point, connected to a Level One Router. The dhcp server is on the router. After a power loss, the AP has been reset. It's not on the factory defaults. I've checked it...
I can connect to the AP, got network, internet and everything, but i cannot locate its IP address. There might be a chance of being on a different subnet. I've tried to locate it using "THE DUDE" from mikrotik, but i cannot find anything.
I have the MAC address of the AP.

Is there a way, or some software i can use to locate an IP address from the MAC ADDRESS? (RARP)

Thank you in advance

 

[burtsbees]

Anything connected in the same subnet (arp -a)---or on the router, show mac-address-table.

Burt

 

[teckn1k]

I've tried this but i only get the IP address of the dhcp server. What if the AP is on another subnet?

 

[burtsbees]

Sorry---thought they were Cisco. I don't know about Level One.

Burt

 

[teckn1k]

I cannot find anything yet. Please, if someone can help, that would be great, because I have exactly the same problem with a couple of other devices. One of them is a Senao SL-2611AP.
Thank you.

 

[burtsbees]

The only way I know is get a computer on the same subnet and do an arp -a...Windows, UNIX, or OpenVMS will all do the same thing.

Burt

 

[dtrtel]

You could try a brute force method. I haven't tried this,
so it may require a little more tweaking. But in theory
you iterate through the private ip address spaces and do
an IP scan for each until you find which subnet the AP is in.

Configure your computer ethernet interface to
1) local IP=192.168.0.2/255.255.0.0 <-class B mask
Scan for IPs in the range 192.168.0.1 - 192.168.255.254
2) local IP=172.16.0.2/255.240.0.0
Scan for 172.16.0.1 - 172.31.255.254
3) local IP=10.0.0.2/255.0.0.0
Scan for 10.0.0.1 - 10.255.255.254

You may get some hits when you scan a valid broadcast
addresses so you'll need to interpret the output.

Tools like Cyberkit have a netscanner built in.

http://www.snapfiles.com/download/dlcyberkit.html

Check the help file, you can save the output to a file
and check after it completes. It is unlikely that an AP
would block ICMP echo request from the LAN side so you
could use the 'ping' function from the netscanner. When
you get a reply from an unexpected IP you can look at
your own arp cache "arp -a" in command window. Match up
the MAC address with the unexpected IP reply. Bingo.

If you try this, I'd be interested to know how things go.


--jeff

http://linkedin.com/in/JeffLynch

 

[burtsbees]

What would using a supernet mask rather than a subnet mask do?

Burt