Symptom
Wireless clients deleted with CO_CLIENT_DELETE_REASON_EXCLUDE_IP_THEFT reason.
IP theft detected on either IP address learning method (ARP and DHCP):
2022/06/30 08:54:00.633037 {wncd_x_R0-0}{1}: [client-iplearn] [18311]: (note): MAC: aaaa.aaaa.aaaa Client IP learn successful. Method: DHCP IP: X.X.X.X
2022/06/30 08:54:00.635606 {wncd_x_R0-0}{1}: [client-iplearn] [18311]: (ERR): MAC: aaaa.aaaa.aaaa SISF theft event IP_THEFT_ATTEMPT IP X.X.X.X vlan X ifhdl: 0x90000230 owned by MAC: bbbb.bbbb.bbbb
2022/06/30 09:38:18.286704 {wncd_x_R0-6}{1}: [client-iplearn] [18995]: (note): MAC: aaaa.aaaa.aaaa Client IP learn successful. Method: ARP IP: X.X.X.X
2022/06/30 09:38:18.287774 {wncd_x_R0-6}{1}: [client-iplearn] [18995]: (ERR): MAC: aaaa.aaaa.aaaa SISF theft event IP_THEFT_ATTEMPT IP X.X.X.X vlan X ifhdl: 0x9180003d owned by MAC: bbbb.bbbb.bbbb
Conditions
DHCP server with not enough IPv4 addresses for all clients in the network.
Workaround
Increase available IPv4 addresses in DHCP scope.
Further Problem Description