Mac Address For Vm

Powershell to get all MAC addresses of each virtual machine on a host and export to tab delimited file By mindaugas May 21, 2015 Tech, Uncategorized Leave a comment This will spit out the MAC address and name of each virtual machine on a host to a text file. MAC Address Policy: Specifies how to retain network card MAC addresses when cloning the VM. For example, the Generate New MAC Addresses For All Network Adapters value assigns a new MAC address to each network card during cloning. This is the default setting. This is the best option when both the source VM and the cloned VM must operate on the same network.

Summary

#	Range or Prefix	Vendor	Virtual Machine
1	00:50:56	VMWare	VMware vSphere, VMware Workstation, VMware ESX Server
2	00:50:56:80:00:00 → 00:50:56:BF:FF:FF	VMWare	VMware vSphere managed by vCenter Server
3	00:0C:29	VMWare	Standalone VMware vSphere, VMware Workstation, VMware Horizon
4	00:05:69	VMWare	VMware ESX, VMware GSX Server
5	00:1C:14	VMWare	VMWare

OUIs registered by VMWare, Inc

There are 4 OUIs registered by VMware, Inc:

OUI	Assignment Type
00:50:56	MA-L
00:1C:14	MA-L
00:0C:29	MA-L
00:05:69	MA-L

Detection Rule 1

Affects products: VMware vSphere, VMware Workstation, VMware ESX Server

Vmware Mac Address

Signature: OUI is 00:50:56

Conditions

When the administrator assigns the MAC address manually to a virtual machine, this OUI prefix is set automatically. The last 3 octets should be set manually.

However, administrators can set any MAC address to their virtual machines.

References

Example MACs generated

00:50:56:11:22:33
00:50:56:12:23:34
00:50:56:33:A1:BB

Tested on

VMware vSphere 5.5, standalone
VMware VMware Workstation 15

Detection Rule 2

Affects products: VMware vSphere managed by vCenter Server

Signature: MAC address belongs to the range [00:50:56:80:00:00; 00:50:56:BF:FF:FF]

Conditions

According to the VMware OUI allocation scheme, a MAC address has the format of 00:50:56:XX:YY:ZZ, where 00:50:56 represents the VMware OUI, XX is calculated as (80 + vCenter Server ID), and YY and ZZ are random two-digit hexadecimal numbers.

Based on this scheme, we can determine the vCenter Server Unique ID, from the servers' MAC address:

Powercli Get Vm Mac Address

Take the 4th octet: for 00:50:56:97:12:34, it would be 97
Subtract 0x80: 0x97 - 0x80 = 0x17
Rebase it from Base-16 to to Base-10. In our example, it would be 0x17 → 23
vCenter Server Unique ID = 23

References

Example MACs generated

00:50:56:A5:12:34
00:50:56:A5:A0:12
00:50:56:90:A4:BA

Tested on

Mac Address Vmware Appliance

vCenter Server 5.5, 6.5

Detection Rule 3

Affects products: Standalone VMware vSphere, VMware Workstation, VMware Horizon

Signature: OUI is 00:0C:29

Conditions

According to the VMware OUI allocation scheme, the hypervisor generates MAC addresses that consists of the VMware OUI 00:0C:29 and the last three octets of the virtual machine UUID in hexadecimal format. The virtual machine UUID is based on a hash calculated by using the UUID of the ESXi physical machine and the path to the configuration file (.vmx) of the virtual machine.

References

Change Mac Address For Vm

Example MACs generated

00:0C:29:4E:C6:49
00:0C:29:49:92:99
00:0C:29:5C:F3:BA

Tested on

vSphere 5.5, 6.5, VMware Workstation 15

Detection Rule 4

Affects products: Outdated VMWare solutions: VMware ESX, VMware GSX Server

Signature: OUI is 00:05:69

Conditions

According to the VMware OUI allocation scheme, the hypervisor generates MAC addresses that consists of the VMware OUI 00:05:69 and the last three octets generated by the following algorithm:

The first 16 bits are set to the same values as the last 16 bits of the console operating system’s primary IP address.
The final eight bits of the MAC address are set to a hash value based on the name of the virtual machine’s configuration file.