AnyConnect Secure Mobility Client Virtual Miniport Adapter for W

Prasad Mutalik · ‎12-18-2013

Once you connected to VPN thru Anyconnect Client, you will see that Virtual Miniport Adapter gets activated :

any idea why we get the same MAC address for any user who install & use the client?

-------------------------------------------------------------------------------------------------------------------------------------------------------------

Ethernet adapter Local Area Connection 2:

   Connection-specific DNS Suffix . : domain.com
   Description . . . . . . . . . . . : Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows
   Physical Address. . . . . . . . . : 00-05-9A-3C-7A-00
   DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::b55e:8869:d39:1ed5%16(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.0.11.1(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 10.0.1.11
   NetBIOS over Tcpip. . . . . . . . : Enabled

-------------------------------------------------------------------------------------------------------------------------------------------------------------

Tariq Bader · ‎12-22-2013

Anyconnect is always using the same physical virtual MAC address by default. No way to change it.

An enhancement request was created for this before:

CSCtd44727 Anyconnect Client : Ability to change the Mac address

But no intentions to implement this i guess for now.

Tariq

JWGregory · ‎05-02-2014

I'm coming across this problem, as well. Our ePO server sees 100+ Anyconnect laptops all having the same mac address.

We contacted McAfee and found that there is a known issue between ePO and machines that connect via VPN.

You only encounter this problem when the first connection from a client to the ePO server takes place over a VPN connection. If the computer's first connection is via a Local Area Network , the correct Media Access Control address is added to the table.

When a computer communicates with the ePO server via VPN, it uses the VPN virtual computer's MAC address and not its own actual MAC address. This VPN MAC address is the same for all computers connecting through the VPN.

Has there been any response from Cisco about changing this?