Regression #12183
openChanging MAC address for PPP parent interface stopped working
Added by adeel altaf about 3 years ago. Updated 9 months ago.
0%
Description
mac address tab not showing in pppoe client interface i want to spoof my mac please tell me solution already showing in 2.5.1 but not showing in 2.5.2 screenshot attached please resolve thanks
Files
Updated by Jim Pingle about 3 years ago
- Tracker changed from Bug to Regression
- Subject changed from Mac spoofing problem to Changing MAC address for PPP parent interface stopped working
- Priority changed from High to Low
- Affected Architecture deleted (
amd64)
That was changed in #11387 to prevent the field from being set on interfaces which don't have MAC addresses.
In your case, it probably was applying it to the parent, but that isn't always desirable as it could be ambiguous if there are multiple virtual types on the same parent with conflicting settings.
Might be better to assign the parent and enable it without adding any IP addresses, and change the MAC there. In the meantime we can reconsider hiding the field in cases like this were it does work, but it may need some more thought about preventing conflicts.
Changing the type to regression since this was working before but now stopped. And updating the subject and other fields.
Updated by Viktor Gurov over 2 years ago
Jim Pingle wrote in #note-1:
That was changed in #11387 to prevent the field from being set on interfaces which don't have MAC addresses.
In your case, it probably was applying it to the parent, but that isn't always desirable as it could be ambiguous if there are multiple virtual types on the same parent with conflicting settings.
Might be better to assign the parent and enable it without adding any IP addresses, and change the MAC there. In the meantime we can reconsider hiding the field in cases like this were it does work, but it may need some more thought about preventing conflicts.
Changing the type to regression since this was working before but now stopped. And updating the subject and other fields.
https://docs.netgate.com/pfsense/en/latest/interfaces/ppp.html#pppoe-point-to-point-protocol-over-ethernet should be updated to clarify this.
Updated by Jim Pingle over 2 years ago
That page doesn't mention spoofing the MAC now, and needing to spoof it with PPPoE is so rare I don't think that it's worth mentioning as it may lead more people to doing it unnecessarily.
Updated by Fernando Santos over 2 years ago
Jim Pingle wrote in #note-3:
That page doesn't mention spoofing the MAC now, and needing to spoof it with PPPoE is so rare I don't think that it's worth mentioning as it may lead more people to doing it unnecessarily.
Jim, I understand that many interfaces don't need to change, but it's a very useful field because internet providers lock pppoe authentication with mac and are very resistant to changing the mac in the isp configuration and ends up making it too difficult, many still only allow it using the isp's own router, and this feature made these cases much easier and as well as having to replace the equipment or network card, ending up with no connection because of this lock on the mac address made by the internet providers.
It often happens on weekends, and sometimes it would be very helpful if this field were made available again in the case of pppoe connections.
Updated by Jim Pingle over 2 years ago
Fernando Santos wrote in #note-4:
Jim Pingle wrote in #note-3:
That page doesn't mention spoofing the MAC now, and needing to spoof it with PPPoE is so rare I don't think that it's worth mentioning as it may lead more people to doing it unnecessarily.
Jim, I understand that many interfaces don't need to change, but it's a very useful field because internet providers lock pppoe authentication with mac and are very resistant to changing the mac in the isp configuration and ends up making it too difficult, many still only allow it using the isp's own router, and this feature made these cases much easier and as well as having to replace the equipment or network card, ending up with no connection because of this lock on the mac address made by the internet providers.
It often happens on weekends, and sometimes it would be very helpful if this field were made available again in the case of pppoe connections.
You can still do it, assign the parent and spoof it there. No need for anything special here or in the docs for that, it's already covered, just not this specific combination but it's really no different than other uses.
Updated by Fernando Santos over 2 years ago
Jim Pingle wrote in #note-5:
Fernando Santos wrote in #note-4:
Jim Pingle wrote in #note-3:
That page doesn't mention spoofing the MAC now, and needing to spoof it with PPPoE is so rare I don't think that it's worth mentioning as it may lead more people to doing it unnecessarily.
Jim, I understand that many interfaces don't need to change, but it's a very useful field because internet providers lock pppoe authentication with mac and are very resistant to changing the mac in the isp configuration and ends up making it too difficult, many still only allow it using the isp's own router, and this feature made these cases much easier and as well as having to replace the equipment or network card, ending up with no connection because of this lock on the mac address made by the internet providers.
It often happens on weekends, and sometimes it would be very helpful if this field were made available again in the case of pppoe connections.You can still do it, assign the parent and spoof it there. No need for anything special here or in the docs for that, it's already covered, just not this specific combination but it's really no different than other uses.
I tried to do this with the interface without the IP or as DHCP, but when it changes to pppoe it tries to authenticate with the original mac and not with the changed one.
Updated by Danilo Zrenjanin 9 months ago
- Status changed from New to Confirmed
I can confirm that it doesn't work as expected on:
23.09-RELEASE (arm) built on Tue Oct 31 20:56:00 CET 2023 FreeBSD 14.0-CURRENT
After assigning the parent interface and spoofing the MAC address there, the PPPoE still uses the initial MAC address instead of the spoofed one.