Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    SG-1100 WAN MAC Spoofing Guide?

    Official Netgate® Hardware
    6
    13
    583
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      johnny21 last edited by stephenw10

      Hello!

      Is there a step by step guide that describes what steps are needed to perform MAC spoofing on the WAN interface of an SG1100? I have looked at a couple related articles but none of them seem to provide complete directions? Any help is appreciated, thanks!

      1 Reply Last reply Reply Quote 0
      • S
        SamKook last edited by SamKook

        Not sure if there's anything different with the SG1100 but all I do to spoof the WAN MAC on my pfsense install, is go to Interfaces->WAN and enter the MAC I want to use in the MAC Address field.

        1 Reply Last reply Reply Quote 0
        • J
          johnny21 last edited by johnny21

          I was looking at that and it is a a field I cannot click/modify. I get the following message from that screen:

          The MAC address of a VLAN interface must be set on its parent interface

          Edit: I can't click/edit this red box
          Screen Shot 2019-12-01 at 3.32.28 PM.png

          J 1 Reply Last reply Reply Quote 0
          • J
            johnny21 @johnny21 last edited by

            I think these are the relevant system settings but not sure where to actually modify the MAC address setting for the parent:

            Screen Shot 2019-12-01 at 3.27.56 PM.png

            Screen Shot 2019-12-01 at 3.28.26 PM.png

            1 Reply Last reply Reply Quote 0
            • johnpoz
              johnpoz LAYER 8 Global Moderator last edited by

              You have to set the mac on the actual physical interface.. Not a vlan interface.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

              J 1 Reply Last reply Reply Quote 0
              • R
                Rai80 last edited by

                Or from command line: ifconfig mvneta0.4090 ether xx:xx:xx:xx:xx:xx

                1 Reply Last reply Reply Quote 0
                • johnpoz
                  johnpoz LAYER 8 Global Moderator last edited by

                  that is not going to stick..

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

                  1 Reply Last reply Reply Quote 0
                  • R
                    Rai80 last edited by

                    @johnpoz True.

                    To make it 'stick' You can put this it in /etc/inc/interfaces.inc:

                    mwexec("/sbin/ifconfig mvneta0.4090 ether xx:xx:xx:xx:xx:xx");

                    1 Reply Last reply Reply Quote 0
                    • J
                      johnny21 @johnpoz last edited by

                      @johnpoz Thanks! Any guidance on where I can set the physical interface from within the web interface?

                      1 Reply Last reply Reply Quote 0
                      • Derelict
                        Derelict LAYER 8 Netgate last edited by

                        Interfaces > Assignments

                        Add an interface for mvneta0

                        Edit the interface, enable it, spoof the MAC address, but do not number it. Leave IPv4 and IPv6 set to None.

                        Chattanooga, Tennessee, USA
                        The pfSense Book is free of charge!
                        DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        V 1 Reply Last reply Reply Quote 1
                        • V
                          verket @Derelict last edited by

                          @Derelict This is correct but a bit terse for a newbie like me.

                          On the SG-1100, the physical interface will show up as an available network port. When you add it, you can name it something like MACspoof and then put in the MAC address you want. Note that on the 1100, the MAC address will be presented on every port so you won't be able to use the old hardware with that MAC address on the same network segment.

                          1 Reply Last reply Reply Quote 0
                          • Derelict
                            Derelict LAYER 8 Netgate last edited by

                            The real answer is to call your ISP and have them do whatever they have to do to let you use use the hardware MAC address without spoofing.

                            Chattanooga, Tennessee, USA
                            The pfSense Book is free of charge!
                            DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            V 1 Reply Last reply Reply Quote 0
                            • V
                              verket @Derelict last edited by

                              @Derelict Now there's wisdom -- would have saved me a lot of time even if the ISP support queues are long, etc.

                              1 Reply Last reply Reply Quote 0
                              • Referenced by  johnpoz johnpoz 
                              • Referenced by  johnpoz johnpoz 
                              • Referenced by  johnpoz johnpoz 
                              • Referenced by  johnpoz johnpoz 
                              • Referenced by  johnpoz johnpoz 
                              • Referenced by  johnpoz johnpoz 
                              • First post
                                Last post