WAN MAC Spoofing -- WITHOUT web configurator

jhg

Simple question.

Context: Replacing old pfSense CE firewall with new device

I need to configure a spoofed MAC for my WAN interface due to the cable modem being pinned to my old pfSense firewall device. I can find LOTS of posts saying how to do this from the web UI, but I need to do it from the command line. I would have thought this would be easy to find, but my Google-fu seems to be failing me.

Where is the spoofed MAC stored, and what is the correct syntax for setting it?

jhg

I figured this out by "spoofing" the old firewall's WAN MAC to its builtin MAC, and then searched

find / -type f -exec grep -l [existing MAC] {} +

which told me it's in /cf/conf/config.xml at (X)path //interfaces/wan/spoofmac

Still being a newbie at pfSense config from the console, I now see I could have guessed this :-)

Hopefully this will be of some use to others.

Gblenn

@jhg You could edit the /conf/config.xml directly. Search for 'spoofmac' and the first instance should probably be your WAN.
https://docs.netgate.com/pfsense/en/latest/config/xml-configuration-file.html