Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Zenarmor (Sensei)
»
Device HW Address IP4:xxx rather than MAC address
« previous
next »
Print
Pages: [
1
]
Author
Topic: Device HW Address IP4:xxx rather than MAC address (Read 1248 times)
LuPaMo
Newbie
Posts: 7
Karma: 0
Device HW Address IP4:xxx rather than MAC address
«
on:
June 04, 2024, 03:00:09 pm »
I've had a few intermittent problems with this, whereby previously trusted devices (correctly identified by its MAC address) are showing as "New" devices. Upon further inspection, their HW address is no longer the MAC address but identified as "IP4:xxx.xxx.xxx.xxx" where the X's match the devices assigned IP address.
Any ideas on whats causing this?
Logged
LuPaMo
Newbie
Posts: 7
Karma: 0
Re: Device HW Address IP4:xxx rather than MAC address
«
Reply #1 on:
June 04, 2024, 03:01:24 pm »
This the the "New" device with the incorrect HW address
Logged
LuPaMo
Newbie
Posts: 7
Karma: 0
Re: Device HW Address IP4:xxx rather than MAC address
«
Reply #2 on:
June 04, 2024, 03:02:57 pm »
The original trusted device entry;
Logged
sy
Hero Member
Posts: 593
Karma: 44
Re: Device HW Address IP4:xxx rather than MAC address
«
Reply #3 on:
June 04, 2024, 03:58:17 pm »
Hi,
Could device have Randomize MAC activated? Can you create a filter with its MAC Address and check if it has any TCP or UDP session?
Logged
LuPaMo
Newbie
Posts: 7
Karma: 0
Re: Device HW Address IP4:xxx rather than MAC address
«
Reply #4 on:
June 04, 2024, 04:29:22 pm »
Hi,
Ive checked the device settings and doesnt appear to have an option for random MAC. In the OPNSense ARP table the IP + MAC address appear correct, as does the UniFi controller for the AP its connected to.
Filtering on the device, it has open sessions (which are blocked as its not a trusted device).
Cheers,
Luke
Logged
LuPaMo
Newbie
Posts: 7
Karma: 0
Re: Device HW Address IP4:xxx rather than MAC address
«
Reply #5 on:
June 04, 2024, 06:53:23 pm »
To add, for the active session(s); its showing the device ID is the IP4:xx, but the HW address is correct
Logged
sy
Hero Member
Posts: 593
Karma: 44
Re: Device HW Address IP4:xxx rather than MAC address
«
Reply #6 on:
June 04, 2024, 07:04:23 pm »
Hi,
If you remove the untrusted one, does it come back?
Logged
LuPaMo
Newbie
Posts: 7
Karma: 0
Re: Device HW Address IP4:xxx rather than MAC address
«
Reply #7 on:
June 04, 2024, 07:20:29 pm »
Hi,
Yep, comes back after a minute or so
Logged
sy
Hero Member
Posts: 593
Karma: 44
Re: Device HW Address IP4:xxx rather than MAC address
«
Reply #8 on:
June 05, 2024, 07:02:13 pm »
Hi,
Please share a report by following the instructions in the below link
https://www.zenarmor.com/docs/support/reporting-bug
Logged
LuPaMo
Newbie
Posts: 7
Karma: 0
Re: Device HW Address IP4:xxx rather than MAC address
«
Reply #9 on:
June 05, 2024, 07:13:03 pm »
Done - thanks for your assistance on this
Logged
sy
Hero Member
Posts: 593
Karma: 44
Re: Device HW Address IP4:xxx rather than MAC address
«
Reply #10 on:
June 07, 2024, 07:13:25 pm »
Hi,
We have investigated the issue. Zenarmor engine has a logic to identify Router. It causes this issue. With 1.18, we will ship an improvement for this. This logic will be disabled in default to prevent this false positive status.
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Zenarmor (Sensei)
»
Device HW Address IP4:xxx rather than MAC address
