MAC spoofing

Follow

Ian Ramler

• August 17, 2026 20:19

My son has figured out how to spoof his MAC address. He figured out to scan the network and grab the MAC off of one of my devices. Of course, once he does this he can circumvent all the rules I set for him. Does firewalla have any measures to help prevent him doing this? Thank you

0

• 

  Firewalla

  • August 17, 2026 20:23

  If these are wireless devices, the best way is to use the firewalla AP7+VqLAN; Giving your kid their own SSID+password, and then it doesn't matter what they do, they will be forced to their own managed group. https://help.firewalla.com/hc/en-us/articles/36297022580499-Firewalla-Tutorial-Microsegmentation-and-Segmentation-with-AP7

  Still, good to have a chat with the kid too :)

   

  0

  Comment actions Permalink
• 

  Ian Ramler

  • August 18, 2026 13:31

  Thanks for the parenting advice lol. His warning was that he would be put on another VLAN if I saw this again. He doesn't need a lot of internal services so that could work. I was hoping maybe Firewalla did something advanced that I wasn't aware of. DHCP logs would be very nice to see, even if they only went back 7 days. The devices he spoofed were online and must have had active leases. He admitted he had tons of packet loss. It seemed like the devices may have actively been competing to be clients.

  0

  Comment actions Permalink
• 

  Firewalla

  • August 18, 2026 21:32

  The only way to manage spoofed MAC is to use secondary authentication. Example using WiFI WPA-3 enterprise, or WPA2 with pass keys, both of these are supported by the Firewalla. 

  0

  Comment actions Permalink

Please sign in to leave a comment.