Hello Aaron,

I would say that random Mac address is not a big deal because Mac 
authentication is mostly use on Open Mac authentication SSID.

Worst case scenario they have to re-register again. The Mac address is 
generated per SSID so you will keep the same identity on the SSID as before.

In PacketFence we have a security event that detects if the device is using the 
random Mac address feature. The security event show the captive portal and 
shows how to disable the feature for the most common platform.

Thanks,

Ludovic Zammit
Product Support Engineer Principal

Cell: +1.613.670.8432
Akamai Technologies - Inverse
145 Broadway
Cambridge, MA 02142
Connect with Us:         <https://community.akamai.com/>  
<http://blogs.akamai.com/>  <https://twitter.com/akamai>  
<http://www.facebook.com/AkamaiTechnologies>  
<http://www.linkedin.com/company/akamai-technologies>  
<http://www.youtube.com/user/akamaitechnologies?feature=results_main>

> On Oct 22, 2021, at 3:04 PM, Aaron Zuercher via PacketFence-users 
> <packetfence-users@lists.sourceforge.net> wrote:
> 
> Hello,
> What is the best way to address MAC randomization on newer devices 
> (Iphones/Android/Windows 10)?     
> 
> I found this thread about the same issue on ISE and wondered if this can be 
> replicated with PF or if there is a better solution?   
> https://community.cisco.com/t5/security-documents/random-mac-address-how-to-deal-with-it-using-ise/ta-p/4049321
>  
> <https://urldefense.com/v3/__https://community.cisco.com/t5/security-documents/random-mac-address-how-to-deal-with-it-using-ise/ta-p/4049321__;!!GjvTz_vk!Clww-6hk5MPJbfi2mizrGXMlwEXxogeAK-952pSbvASrCj6Ngupb0UY61GscDmYD$>
> 
> Thanks,
> Aaron
> 
> 
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!Clww-6hk5MPJbfi2mizrGXMlwEXxogeAK-952pSbvASrCj6Ngupb0UY61L4GEUBe$
>  

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to