Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SG-1100 WAN MAC Spoofing Guide?

    Scheduled Pinned Locked Moved Official Netgate® Hardware
    13 Posts 6 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      johnny21 @johnny21
      last edited by

      I think these are the relevant system settings but not sure where to actually modify the MAC address setting for the parent:

      Screen Shot 2019-12-01 at 3.27.56 PM.png

      Screen Shot 2019-12-01 at 3.28.26 PM.png

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        You have to set the mac on the actual physical interface.. Not a vlan interface.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        J 1 Reply Last reply Reply Quote 0
        • R
          Rai80
          last edited by

          Or from command line: ifconfig mvneta0.4090 ether xx:xx:xx:xx:xx:xx

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            that is not going to stick..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • R
              Rai80
              last edited by

              @johnpoz True.

              To make it 'stick' You can put this it in /etc/inc/interfaces.inc:

              mwexec("/sbin/ifconfig mvneta0.4090 ether xx:xx:xx:xx:xx:xx");

              1 Reply Last reply Reply Quote 0
              • J
                johnny21 @johnpoz
                last edited by

                @johnpoz Thanks! Any guidance on where I can set the physical interface from within the web interface?

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  Interfaces > Assignments

                  Add an interface for mvneta0

                  Edit the interface, enable it, spoof the MAC address, but do not number it. Leave IPv4 and IPv6 set to None.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  V 1 Reply Last reply Reply Quote 2
                  • V
                    verket @Derelict
                    last edited by

                    @Derelict This is correct but a bit terse for a newbie like me.

                    On the SG-1100, the physical interface will show up as an available network port. When you add it, you can name it something like MACspoof and then put in the MAC address you want. Note that on the 1100, the MAC address will be presented on every port so you won't be able to use the old hardware with that MAC address on the same network segment.

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      The real answer is to call your ISP and have them do whatever they have to do to let you use use the hardware MAC address without spoofing.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      V 1 Reply Last reply Reply Quote 0
                      • V
                        verket @Derelict
                        last edited by

                        @Derelict Now there's wisdom -- would have saved me a lot of time even if the ISP support queues are long, etc.

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.