MAC Address

[Easton10800]

I have a mac address that continues to attemp to connect to my network which I have blocked.  I believe it may be assoicated (due the similar mac address) with either the router or satellite but I cant figure out for sure.  Any way to find this out?

[CrimpOn]

On the Orbi web interface (http://orbilogin.net), the Attached Devices page shows the MAC address of every device connected to the Orbi, including the satellite.  If the Orbi satellite is functioning, then that MAC address is probably not the satellite, which is easy to confirm.

One suggestion is to record that MAC address and look it up on one of the OUI databases, such as Wireshark:

https://www.wireshark.org/tools/oui-lookup.html 

Once you know which manufacturer the MAC address is assigned to, that may provide a clue to which device this is.

[Easton10800]

Thanks Crimpon

It is listed under the blocked devices nbot currently connected to the network, I am assuming because I blocked it?

I did go to https://www.wireshark.org/tools/oui-lookup.html and it came back as no matches.

I am a novices (pretty much) with the router

[CrimpOn]

Since it is not connected, can you post the MAC address?

[Easton10800]

I sent you a PM

[CrimpOn]

Thanks. I  confirm that this MAC address does not match any known vendor.  Very strange. 

• All of your known devices are functioning correctly?
• Do you continue to get messages about this MAC address trying to connect?

There is a feature of many modern WiFi devices called "randomize MAC address".  Check one of these links:

https://www.google.com/search?client=firefox-b-1-d&q=randomize+mac+address 

There is a possibility that one of your WiFi devices is set to randomize and at least one of the connection attempts was rejected.

While I appreciate how this capability allows a person to avoid esoteric attacks, in my environment it is a total disaster. Being a tiny bit OCD, I have assigned IP addresses to all of the "permanent" devices on my network.  My IP scheme is not paricularly creative, but at the tiime it made sense to me.  Two of my Linux systems somehow got set to randomize the MAC address, and suddenly they were getting new IP addresses from the DHCP pool rather than the IP address that I had so carefully assigned. Took a lot of muttering and grumbling before I finally tracked down the software that had set that up and deleted it.  My Android phone now has that "privacy" feature, which I also disabled.

Wish I could have been more help.

[Easton10800]

Yes, all 20 devices on my network are working as I "think" they should.  I used to assign IP address specific to mac address on my old Apple router, but gave that practice up when I got the Orbi.  I have blocked the address and removed it from the list, but I had a firmware update to the router and it came back after the reboot.

The only reason I am thinking it belongs to the router or the satallite device is that the mac address's are very similar.  But I am not an expect on this.

I will read up on the google link you included to see if I can make heads or tails from it.

Thanks for the suggestion and help