Multiple 00:00:40 MAC addresses appearing on Macs

Hi all, I'm struggling to identify the cause of a really strange issue that has started to plague our network of Mac devices. We use Cisco switches and have port security turned on which means any device that registers more than one MAC address triggers a port violation which then shuts down the port for a short period of time (5 mins I believe).

A few months ago we suddenly started get lots of violations from Mac devices the were all registering additional MAC addresses (2 usually) that all had the same 6 character prefix (00:00:40).

So far we've not been able to determine the cause and now getting pretty desperate and exploring all possible avenues.

All we know id that prefix is registered to a company called Applicon from back in the day but is now shut down.

Has anyone come across this issue or know of any possible reason why this may be happening?

Thanks

Answered by DTS Engineer in 820634022

Hey hey, this question! I admire your resourcefulness in uncovering and posting your question to the old school MacNetworkProg mailing list.

I didn’t respond there because this isn’t really a programming question, but rather a question about the on-the-wire behaviour of the Mac. I suspect that the underlying cause of the issue you’re seeing is macOS’s private Wi-Fi address feature. However, my focus is primarily on developer issues, and so I don’t maintain expertise in that technology.

You might have better luck asking this question over in the Apple Support Community, run by Apple Support, and specifically in the Business and Education topic area.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Hey hey, this question! I admire your resourcefulness in uncovering and posting your question to the old school MacNetworkProg mailing list.

I didn’t respond there because this isn’t really a programming question, but rather a question about the on-the-wire behaviour of the Mac. I suspect that the underlying cause of the issue you’re seeing is macOS’s private Wi-Fi address feature. However, my focus is primarily on developer issues, and so I don’t maintain expertise in that technology.

You might have better luck asking this question over in the Apple Support Community, run by Apple Support, and specifically in the Business and Education topic area.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Multiple 00:00:40 MAC addresses appearing on Macs
 
 
Q