Saturday, I am going to have to attempt to connect my notebook to a network that does not like me much. It is a school network. I work there as a volunteer, but don't have a sysadmin to explain what is going on.
I could not connect to this network before. I tried to connect via dhcp, as follows:
service network-manager stop
ifconfig eth0 down
ifconfig eth0 hw ether 00:11:22:33:44:55
ifconfig eth0 up
dhclient eth0
(where 00:11:22:33:44:55 is the mac address of the machine I took the cable from)
I use live thumbdrives on the lab's machines, and they connect fine via dhcp. (I just run dhclient eth0
) (the thumbdrives run debian, not ubuntu. My notebook runs ubuntu. I'd hope this would not make a difference, though)
My question is: is there anything else I should try ? What other hypothesis should I consider ? What other tests should I run ?
(btw: yes, my computer's card is eth0)
About the duplicate/close proposal: This question is specifically about other security measures. It asks "I spoofed the MAC and got nowhere", and asks for hypothesis as to why. It might be narrow, but it certainly is not "how to spoof a MAC"
It's possible that they're using some fingerprinting algorithm (i.e. the particular behavior of that ethernet interface such as timing etc.) to determine that the physical host has changed, or they could be polling the various ports on the router (I believe this is possible using SNMP) to determine that it has changed in too short a timeframe.
Think of this from the other angle, and Google "prevent MAC address spoofing" and you'll see a few vendor-specific solutions.
As to how you can get around it, the only possible way seems to be setting up a network bridge (i.e. internet sharing) on one of the existing computers to connect your laptop.
Are you sure the network does only use the MAC-address for security? Modern Network Access Control (NAC) Systems use much more than just the MAC, e.g. agents on the connecting system that ensure compliance, authentication either password- or certificate-based, etc.