Replies

Two MAC addresses for a device is correct for my setup. I use a wifi extender (Netgear WN3000RPv3) which generates a virtual MAC when I connect a device to it. The extender passes the virtual MAC to my router (Netgear WNDR3700v4). The router sees this as a new device so it assigns it a new IP (I use dynamic IP addresses). The first time I connect a new device to the extender, it creates a table entry associating the real MAC to its virtual MAC, ensuring that the router will always see the same virtual MAC for that device. Since I use an Access Control List on the router, it ignores any MAC that is not in its authorized list. So, when I connect a device to the extender, I must to add its virtual MAC to the router’s ACL. There are times when I connect a device to the router without using the wifi extender. In that case, the router sees the device’s (real) MAC address. That’s why I have to have both MACs in the ACL.
btw – since the extender itself has to wirelessly connect to my router, I had to add its MAC to the ACL. So, the router ACL now has an entry for the extender plus two entries for each device connected to the extender – one for the virtual MAC and one for the real MAC.