Re: [PacketFence-users] Mobile phone MAC randomisation breaks PF

2017-09-19 Thread Torry, Andrew via PacketFence-users 
Yes, I understand about the probes but this phone is randomizing its global MAC 
address and is appearing on the PF server
with multiple MAC addresses each and every day.
At the last count some 27 unique MAC addresses all with the same prefix but 
different host parts, here is a snapshot of a few

registered   00:08:22:16:49:b7 android-5d0bfe1d7b4fe9f  
  Smartphones/PDAs/Tablets
registered   00:08:22:4a:77:d2 android-5d0bfe1d7b4fe9f  
  Smartphones/PDAs/Tablets
registered   00:08:22:8c:91:fd  android-5d0bfe1d7b4fe9f 
   Smartphones/PDAs/Tablets
registered   00:08:22:ba:2b:3c android-5d0bfe1d7b4fe9f  
  Smartphones/PDAs/Tablets

All the same device!

Each time the person ‘connects’ to the WiFi (Note I specifically mention 
CONNECTS!) the MAC address is different.

It is a Lenovo A7020A48 I have a seen it doing it.

Andrew

From: Diego Garcia del Rio via PacketFence-users 
[mailto:packetfence-users@lists.sourceforge.net]
Sent: 19 September 2017 16:42
To: packetfence-users@lists.sourceforge.net
Cc: Diego Garcia del Rio
Subject: Re: [PacketFence-users] Mobile phone MAC randomisation breaks PF

Agree with Tim... Unless she's telling the phone to "forget" the network each 
and every day...

On Tue, Sep 19, 2017 at 11:04 AM, Tim DeNike via PacketFence-users 
<packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>>
 wrote:
MAC randomization (At least the way Ive seen it work) only randomizes the MAC 
when the device is passively probing for networks.  It uses the fixed MAC when 
it actually connects.

OR.. It uses a random MAC for a specific SSID and doesn't change it while 
connected to that SSID.

If its randomizing the MAC every single time, tell her tough beans, get a phone 
that works correctly.  :D

On Tue, Sep 19, 2017 at 10:15 AM, Torry, Andrew via PacketFence-users 
<packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>>
 wrote:
Hi folks,

We have a new student who cannot seem to get onto our PF controlled wifi since 
her mobile phone
keeps randomising its MAC address. It appears this feature is hard coded into 
the phones OS and
cannot be disabled. The only way we can see to fix this is to register every 
one of the 65535 MAC addresses
the device could be using to the user’s ID but this sees dangerously cludgy to 
me.

Has anyone else come up with a potential fix for this as it completely breaks 
PF and other MAC based registration systems.

Andrew



Andrew Torry

Senior Infrastructure Engineer



Tel: 01326 370760

Email: andrew.to...@fxplus.ac.uk<mailto:andrew.to...@fxplus.ac.uk>




[cid:image003.png@01D3316A.8A472890]



[Falmouth Exeter Plus]

[cid:image006.png@01D3316A.8A472890]






[Twitter]<https://twitter.com/falmouthexeter>



[Facebook]<https://www.facebook.com/falmouthexeter>



[Instagram]<https://www.instagram.com/falmouthexeterplus/>



[YouTube]<https://www.youtube.com/channel/UC5-Jq4vTOhWgYoJJDYrZHWw>


[cid:image003.png@01D3316A.8A472890]




[Falmouth University]

Falmouth Exeter Plus is an exempt charity established by Falmouth University 
and the University of Exeter to deliver their shared Higher Education services 
in Cornwall.

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/packetfence-users


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Mobile phone MAC randomisation breaks PF

2017-09-19 Thread Diego Garcia del Rio via PacketFence-users 
Agree with Tim... Unless she's telling the phone to "forget" the network
each and every day...

On Tue, Sep 19, 2017 at 11:04 AM, Tim DeNike via PacketFence-users <
packetfence-users@lists.sourceforge.net> wrote:

> MAC randomization (At least the way Ive seen it work) only randomizes the
> MAC when the device is passively probing for networks.  It uses the fixed
> MAC when it actually connects.
>
> OR.. It uses a random MAC for a specific SSID and doesn't change it while
> connected to that SSID.
>
> If its randomizing the MAC every single time, tell her tough beans, get a
> phone that works correctly.  :D
>
> On Tue, Sep 19, 2017 at 10:15 AM, Torry, Andrew via PacketFence-users <
> packetfence-users@lists.sourceforge.net> wrote:
>
>> Hi folks,
>>
>>
>>
>> We have a new student who cannot seem to get onto our PF controlled wifi
>> since her mobile phone
>>
>> keeps randomising its MAC address. It appears this feature is hard coded
>> into the phones OS and
>>
>> cannot be disabled. The only way we can see to fix this is to register
>> every one of the 65535 MAC addresses
>>
>> the device could be using to the user’s ID but this sees dangerously
>> cludgy to me.
>>
>>
>>
>> Has anyone else come up with a potential fix for this as it completely
>> breaks PF and other MAC based registration systems.
>>
>>
>>
>> Andrew
>>
>>
>>
>> Andrew Torry
>>
>> Senior Infrastructure Engineer
>>
>>
>>
>> Tel: 01326 370760
>>
>> Email: andrew.to...@fxplus.ac.uk
>>
>>
>>
>> [image: Falmouth Exeter Plus]
>> [image: Twitter]  [image: Facebook]
>>  [image: Instagram]
>>  [image: YouTube]
>> 
>>
>> [image: Falmouth University]
>>
>> Falmouth Exeter Plus is an exempt charity established by Falmouth
>> University and the University of Exeter to deliver their shared Higher
>> Education services in Cornwall.
>>
>>
>> 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Mobile phone MAC randomisation breaks PF

2017-09-19 Thread Tim DeNike via PacketFence-users 
MAC randomization (At least the way Ive seen it work) only randomizes the
MAC when the device is passively probing for networks.  It uses the fixed
MAC when it actually connects.

OR.. It uses a random MAC for a specific SSID and doesn't change it while
connected to that SSID.

If its randomizing the MAC every single time, tell her tough beans, get a
phone that works correctly.  :D

On Tue, Sep 19, 2017 at 10:15 AM, Torry, Andrew via PacketFence-users <
packetfence-users@lists.sourceforge.net> wrote:

> Hi folks,
>
>
>
> We have a new student who cannot seem to get onto our PF controlled wifi
> since her mobile phone
>
> keeps randomising its MAC address. It appears this feature is hard coded
> into the phones OS and
>
> cannot be disabled. The only way we can see to fix this is to register
> every one of the 65535 MAC addresses
>
> the device could be using to the user’s ID but this sees dangerously
> cludgy to me.
>
>
>
> Has anyone else come up with a potential fix for this as it completely
> breaks PF and other MAC based registration systems.
>
>
>
> Andrew
>
>
>
> Andrew Torry
>
> Senior Infrastructure Engineer
>
>
>
> Tel: 01326 370760
>
> Email: andrew.to...@fxplus.ac.uk
>
>
>
> [image: Falmouth Exeter Plus]
> [image: Twitter]  [image: Facebook]
>  [image: Instagram]
>  [image: YouTube]
> 
>
> [image: Falmouth University]
>
> Falmouth Exeter Plus is an exempt charity established by Falmouth
> University and the University of Exeter to deliver their shared Higher
> Education services in Cornwall.
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] Mobile phone MAC randomisation breaks PF

2017-09-19 Thread Torry, Andrew via PacketFence-users 
Hi folks,

We have a new student who cannot seem to get onto our PF controlled wifi since 
her mobile phone
keeps randomising its MAC address. It appears this feature is hard coded into 
the phones OS and
cannot be disabled. The only way we can see to fix this is to register every 
one of the 65535 MAC addresses
the device could be using to the user’s ID but this sees dangerously cludgy to 
me.

Has anyone else come up with a potential fix for this as it completely breaks 
PF and other MAC based registration systems.

Andrew



Andrew Torry

Senior Infrastructure Engineer



Tel: 01326 370760

Email: andrew.to...@fxplus.ac.uk




[cid:image1770dc.PNG@99cbdc99.42844c29]
[Falmouth Exeter Plus]  
[cid:image885a4a.PNG@cdfbfc6e.4489c125]


[Twitter]   [Facebook] 
[Instagram] 
 [YouTube] 


[cid:image80217a.PNG@ccd200b7.49951c1b]


[Falmouth University]

Falmouth Exeter Plus is an exempt charity established by Falmouth University 
and the University of Exeter to deliver their shared Higher Education services 
in Cornwall.
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users