Unusual random MAC addresses appearing on the network
Unusual random MAC addresses appearing on the network
Hello, in short I was working on something in PFSense when my main switch began acting up, claiming it was trying to adopt. When I realized someone had taken my IP address, I reset it to factory settings since I wasn’t sure what else to do. I manually assigned an IP outside the DHCP range, and it worked. Then I noticed random MAC addresses showing up on the network, which made me doubt my actions. I’m wondering if an open port on the PFSense might be the cause, but I’m not sure how to check. Any advice would be greatly appreciated. P.S. I’m using UNIFI.
They all originate from the same port linked to the Pfsense router. I have three small Unifi switches connected in a daisy chain across the AP. I’m guessing the MAC address comes from a main switch for the building. Also, I don’t see 24 entries but over 100 MAC addresses are visible.
It seems like a 24-port switch is likely involved since there are 24 MAC addresses starting with the same prefix and it mentions GbE. It makes me think they’re wired rather than using Wi-Fi. If it’s for the building, I’d assume it’s not set up in an obvious way, but I’m not sure. This setup definitely looks unusual.
But it didn't happen until the random IP was stolen. (I'm not sure what to name it, as the IP changed randomly.) My external IP address—at least I thought it was consistent—started the same, and nothing on my network began with 82 except for that external IP.
It returned to its previous state after switching back to the older PFsense backup.
This occurs because the system is interacting with a network that may be affected by other users' activities.
I'm still getting the hang of this. Right now, both Asus routers are set as APs. But sometimes the internet signal drops, and I’m not sure if there’s anything that can act as a DHCP server. My mini Unifi switches all have IP addresses coming from PFSense.