Random Private MAC address

[rmcrae]

I use DHCP reservations to ensure the devices on my network get the same IP address every time. I have security and routing policies that depend on known IP addresses. Recently Apple, I’m sure other will follow, enabled a feature that by default that randomly selects a private MAC address when they lease an IP address. I realize that you can disable this feature on these devices but is there a way to prevent these random MAC addresses on the network in the first place? I’m looking for a solution that works from the networks point of view that doesn’t require me to black hole my Guest DHCP range. My device is a Palo Alto PA220.

I'm aware of several articles on the net like: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAutCAG

[BPry · Accepted solution]

@rmcrae,

You can't do this directly via your firewall using the built-in DHCP server no.