Information Security Asked on March 3, 2021
If I connect to my VPN and then run arp -a the MAC address of my router changes to 00:00:00:00:00:02. Is this normal behaviour? What is the reasoning behind this?
Furthermore a MAC address spoofing is only of real concern when there are more than one devices on the network, and they try to become the MITM correct?
When you spin up a VPN tunnel, the VPN tunnel becomes your new primary route. If the router address remained as your physical router MAC, then you would not be routing traffic through the VPN, and you would not be protected. The virtual router your VPN sets up is using the synthetic MAC address 00:00:00:00:00:02. The change you're seeing is the correct and expected behavior when activating a VPN.
And you are correct, MAC spoofing requires an attacking device on the same LAN. What you are seeing is not MAC spoofing, regardless.
Correct answer by gowenfawr on March 3, 2021
Get help from others!
Recent Answers
Recent Questions
© 2024 TransWikia.com. All rights reserved. Sites we Love: PCI Database, UKBizDB, Menu Kuliner, Sharing RPP