Pondering... that implies that a heavyweight roaming event could change the MAC.
If true, that implies the WiFi roaming architecture considerations is even more critical unless change of MAC doesn’t matter to the overall system design and app behavior (I.e multimedia activity while physically roaming) On Fri, Jul 31, 2020 at 9:54 AM Jake Snyder <jsnyde...@gmail.com> wrote: > It should change the next time it associates. > > Sent from my iPhone > > On Jul 30, 2020, at 1:02 PM, GT Hill <g...@gthill.com> wrote: > > > > From what I understand it will keep the same MAC longer if it passing > traffic at that 24 hour mark. > > GT Hill > > On Thu, Jul 30, 2020 at 1:44 PM Rios, Hector J < > hector.r...@austin.utexas.edu> wrote: > >> I’ve done several tests on an iPhone 7 and there have been instances >> where the phone retains the same private MAC addr longer than 24 hours. Has >> anyone else done more testing? >> >> >> >> Hector Rios, Wireless Network Architect >> >> The University of Texas at Austin >> >> >> >> >> >> >> >> *From:* The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *On Behalf Of *Enfield, Chuck >> *Sent:* Friday, July 10, 2020 4:14 PM >> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> *Subject:* Re: [WIRELESS-LAN] MAC Randomization, a step further... >> >> >> >> Ahh. I glossed right over the 24-hour part. That’s much less >> distressing, but I’m going to have a beer anyway. >> >> >> >> Thanks Tim. >> >> >> >> *From:* The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *On Behalf Of *Tim Cappalli >> *Sent:* Friday, July 10, 2020 5:04 PM >> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> *Subject:* Re: [WIRELESS-LAN] MAC Randomization, a step further... >> >> >> >> But why would that change anything? A user on campus for a football >> game is there for less than 24 hours. The MAC address changes per ESSID, >> every 24 hours. I don’t understand what changes here for that use case? >> >> >> >> It really only impacts mid to long term guests. So I guess in your >> example, parents weekend may be the one that is affected. But even then, >> dropping the lease times would solve the problem. I believe many wireless >> vendors recommend a visitor lease time of 1-8 hours. >> >> >> >> *From: *The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> >> *Date: *Friday, July 10, 2020 at 17:01 >> *To: *WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> >> *Subject: *Re: [WIRELESS-LAN] MAC Randomization, a step further... >> >> Tim, >> >> With Covid, any lease time would not be an issue. But how big were your >> home football events / tailgate parties / parent weekends at Brandeis? I’m >> focusing more on the impact of those events on the guest side of things. >> >> Brad >> >> >> >> *From:* The EDUCAUSE Wireless Issues Community Group Listserv [ >> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Tim Cappalli >> *Sent:* Friday, July 10, 2020 3:53 PM >> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> *Subject:* [EXTERNAL]Re: [WIRELESS-LAN] MAC Randomization, a step >> further... >> >> >> >> Agreed on IPv6, but even for IPv4, I imagine most folks are running short >> leases on a visitor network, so I don’t really think much changes here. If >> your leases are 12 hours or less, there should be no impact. >> >> >> >> tim >> >> >> >> *From: *The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> >> *Date: *Friday, July 10, 2020 at 16:51 >> *To: *WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> >> *Subject: *Re: [WIRELESS-LAN] MAC Randomization, a step further... >> >> Maybe a good use case for IPv6???? >> >> >> >> *From:* The EDUCAUSE Wireless Issues Community Group Listserv [ >> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Enfield, Chuck >> *Sent:* Friday, July 10, 2020 3:49 PM >> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> *Subject:* [EXTERNAL]Re: [WIRELESS-LAN] MAC Randomization, a step >> further... >> >> >> >> Uhg. Didn’t even think about that. >> >> >> >> *From:* The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *On Behalf Of *Eric LaCroix >> *Sent:* Friday, July 10, 2020 4:48 PM >> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> *Subject:* Re: [WIRELESS-LAN] MAC Randomization, a step further... >> >> >> >> We’re all going to need to check the TTL on DHCP leases… some of our >> scopes will get eaten alive otherwise. >> >> >> >> *From: *The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of "Floyd, Brad" < >> bfl...@mail.smu.edu> >> *Reply-To: *The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> >> *Date: *Friday, July 10, 2020 at 3:42 PM >> *To: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> >> *Subject: *Re: [WIRELESS-LAN] MAC Randomization, a step further... >> >> >> >> Thanks Tim. I just started a conversation with my SE. >> >> Brad >> >> >> >> *From:* The EDUCAUSE Wireless Issues Community Group Listserv [ >> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Tim Cappalli >> *Sent:* Friday, July 10, 2020 2:07 PM >> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> *Subject:* [EXTERNAL]Re: [WIRELESS-LAN] MAC Randomization, a step >> further... >> >> >> >> For extended visitor use cases (over 1 day), Passpoint is really the only >> feasible solution moving forward. Aruba has a Passpoint offering/service >> called Air Pass and WBA’s OpenRoaming initiative is gaining a lot of >> support. >> >> >> >> tim >> >> >> >> *From: *The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> >> *Date: *Friday, July 10, 2020 at 15:04 >> *To: *WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> >> *Subject: *Re: [WIRELESS-LAN] MAC Randomization, a step further... >> >> Tim, >> >> Anything in the works from Aruba about how best to deal with ClearPass >> Guest MAC Auth? >> >> Thanks, >> >> Brad >> >> >> >> *From:* The EDUCAUSE Wireless Issues Community Group Listserv [ >> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Tim Cappalli >> *Sent:* Friday, July 10, 2020 2:01 PM >> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >> *Subject:* [EXTERNAL]Re: [WIRELESS-LAN] MAC Randomization, a step >> further... >> >> >> >> Connected MAC randomization on iOS will be enabled by default, just like >> on Android (starting in 10). >> >> >> >> Two major differences: >> >> 1. iOS does not expose the randomization knob (to disable it) to end >> users during initial connection. It is available after connection in the >> saved network list >> 2. On Android (version 10 and 11), the MAC is set once per ESSID for >> the lifetime of the OS instance (aka until a factory reset). On iOS 14, >> the >> MAC is set per ESSID and is changed once every 24 hours. >> >> >> >> Note that Android 11 has a developer option to enable a per-connection >> MAC which likely indicates this will enabled by default or exposed to users >> in Android 12. >> >> >> >> tim >> >> >> >> *From: *The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> >> *Date: *Friday, July 10, 2020 at 14:57 >> *To: *WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> >> *Subject: *[WIRELESS-LAN] MAC Randomization, a step further... >> >> Apple is moving forward with their privacy efforts. The next step is to >> randomize MAC addresses when connecting to an AP, not just when probing. >> This is coming soon. >> >> >> >> https://globalreachtech.com/blog-mac-randomisation-apple/ >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fglobalreachtech.com%2Fblog-mac-randomisation-apple%2F&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671834533&sdata=Z%2FKW9R9DvQGDvsS%2FAcoB7pddpAbt8xc%2BaoHYmh%2FgLIM%3D&reserved=0> >> >> >> >> This is from Apple. Luckily, there is a way to disable private addresses. >> I just don’t know if it will be ON by default. >> >> https://support.apple.com/en-qa/HT211227 >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.apple.com%2Fen-qa%2FHT211227&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671834533&sdata=61p29s4ijOoLr2XlNGmeO%2FsstETFN0ZgYFdvOD42BRg%3D&reserved=0> >> >> >> >> Happy Friday! >> >> >> >> Hector Rios, Wireless Network Architect >> >> The University of Texas at Austin >> >> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671844534&sdata=Nqj2fwprkxvrKC7awgJQzCIFc2OltPup%2Bj05EBIa8jI%3D&reserved=0> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671844534&sdata=Nqj2fwprkxvrKC7awgJQzCIFc2OltPup%2Bj05EBIa8jI%3D&reserved=0> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671854521&sdata=kVYByGLXe%2BF8r0hHr%2FWnN9GtTVyU%2FHAx1MjLYR47jXo%3D&reserved=0> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671854521&sdata=kVYByGLXe%2BF8r0hHr%2FWnN9GtTVyU%2FHAx1MjLYR47jXo%3D&reserved=0> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671864514&sdata=qqzYw865YyRaBG1y4TbS95J8XSsO6XVYlIklMDDTj8s%3D&reserved=0> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671864514&sdata=qqzYw865YyRaBG1y4TbS95J8XSsO6XVYlIklMDDTj8s%3D&reserved=0> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671874506&sdata=vvuS2%2F6AgdLyZ5qiuGEyu6%2Bmq9YyRMhsjakDN2KW17w%3D&reserved=0> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671874506&sdata=vvuS2%2F6AgdLyZ5qiuGEyu6%2Bmq9YyRMhsjakDN2KW17w%3D&reserved=0> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671884505&sdata=0IhGL5wOoZirkPrCBxlfQoevkIR4j%2FVPSy4nh8Pn7%2B4%3D&reserved=0> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671884505&sdata=0IhGL5wOoZirkPrCBxlfQoevkIR4j%2FVPSy4nh8Pn7%2B4%3D&reserved=0> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> <https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cd2827f8f7f144b4d2c5908d82514d355%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300118671884505&sdata=0IhGL5wOoZirkPrCBxlfQoevkIR4j%2FVPSy4nh8Pn7%2B4%3D&reserved=0> >> >> >> >> This message is from an external sender. Learn more about why this >> matters. <https://ut.service-now.com/sp?id=kb_article&number=KB0011401> >> >> >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> >> ********** >> Replies to EDUCAUSE Community Group emails are sent to the entire >> community list. If you want to reply only to the person who sent the >> message, copy and paste their email address and forward the email reply. >> Additional participation and subscription information can be found at >> https://www.educause.edu/community >> > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
