Airport Extreme (802.11n type) Virtual Mac Addresses?

Question

Level 1

4 points

Airport Extreme (802.11n type) Virtual Mac Addresses?

Back in March, I installed a Fingbox on my network, and since then, I've been seeing a MAC address come in and out of range of my Airport Extreme (802.11n type) multiple times per day with an OUI of 06:25:bc, which turns up no manufacturer when I look it up. I've recently determined that the BSSID of my Airport Extreme happens to match the MAC address exactly if I flip the sixth and seventh bit of the mystery MAC, changing it to 00:25:bc:nn:nn:nn. Is this mystery MAC really my Airport Extreme? Is the flipping of two bits common for Apple, instead of one, like normal? (Is that because flipping just the seventh makes it a Huawei OUI?) Why would the Airport Extreme even need a virtual MAC, anyway? I'd appreciate any information, as the purpose of this just isn't clear to me. Thank you!

AirPort

Posted on Jan 7, 2020 5:55 AM

Reply

Answer 1

Bob Timmons

Level 10

185,102 points

Jan 7, 2020 10:43 AM in response to brython

Not sure if you were aware that there are technically 3 different, but very similar "MAC Addresses" for the Apple router. The first six "characters" in the addresses are identical. Just to be different, Apple calls them......

1) Ethernet

2) WiFi 2.4 GHz

3) WiFi 5 GHz

But not sure if this will help with your puzzle or make it more puzzling.

Reply

Answer 2

Tesserax

Level 10

158,208 points

Jan 7, 2020 9:47 AM in response to brython

AFAIK, Apple does not have any history of "flipping bits" on their assigned MAC addresses. Besides it's not Apple that assigns them. There's an international agency for that.

You also cannot change/spoof any AirPort base station's MAC address via the AirPort Utility.

Reply

Answer 3

Tesserax

Level 10

158,208 points

Jan 7, 2020 11:56 AM in response to brython

Is the flipping of two bits common for Apple, instead of one, like normal?

Yes, I did understand your question. This question led me to believe you thought this is something Apple was doing. I think Bob may have offered a good reason for the multiple MAC addresses that are assigned to an AirPort base station ... and this could be what you are seeing in the Fingbox.

You could also use the following command in the Terminal app to see the current routing table of your network's router:

arp -an

For my Time Capsule, there were three different MAC entries with the Wi-Fi radios enabled, and only one if they were not.

Reply

Answer 4

brython Author

Level 1

4 points

Jan 7, 2020 12:50 PM in response to Bob Timmons

Yes, the mystery MAC matches (except for the aforementioned two bits) what I would assume is the 2.4GHz, since it's the first Wi-Fi MAC address listed. (Airport Utility app just calls it "Wi-Fi" with no distinction as to whether or not it's the 2.4GHz or 5GHz MAC.)

I've attached screenshots of the MACs from the Airport Utility app and the reporting of the mystery MAC in the Fingbox app.

Reply

Answer 5

brython Author

Level 1

4 points

Jan 7, 2020 10:13 AM in response to Tesserax

Thanks for the response. I get that Apple doesn't assign their own OUI; that's not my question. My question is, is my Airport virtualizing its MAC for some reason, and if so, why? I only wonder that because the mystery MAC is identical to the Airport's Wi-Fi MAC for all bits (not just the OUI) except for the 6th and 7th.

Reply

Answer 6

Bob Timmons

Level 10

185,102 points

Jan 7, 2020 1:05 PM in response to brython

(Airport Utility app just calls it "Wi-Fi" with no distinction as to whether or not it's the 2.4GHz or 5GHz MAC.)

Open AirPort Utility

Hold down the option key on a Mac while you double click on the picture of the AirPort

You will see the following:

The model number of the AirPort

The serial number of the AirPort

The version of firmware currently installed on the AirPort

The Ethernet "ID"

The Wi-Fi (2.4 GHz) "ID" with the current channel in use

The Wi-Fi (5 GHz) "ID" with the current channel in use

Wireless Clients that are currently connected

If you are using AirPort Utility on an iPhone / iPad

Open the App

Tap on the picture of the AirPort

Tap on Hardware Info

Channels in use are not displayed on this screen

Tap on Wireless Clients on the previous screen to see devices that are currently connected via Wi-Fi

I don't use Fingbox, so another user will have to help if you have specific questions about that utility

Reply

Airport Extreme (802.11n type) Virtual Mac Addresses?

Similar questions