Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When adding network adapters to a network bridge, it generates a new MAC address from one of the unbridged ones but with the locally administered bit set.

For example, if the original MAC address is 00-aa-bb-cc-dd-ee, the new bridge MAC address would be 02-aa-bb-cc-dd-ee.

Is there any way to prevent this bit being set?

share|improve this question

The bit is being set for a reason, it means that the MAC address was locally generated and may not be globally unique.

See the diagram in the Mac Address wiki page for more details.

Since Windows uses a closed source model, it will probably be impossible to change this behavior.

Also, I am not clear on this part but because documentation is not available there might not be a better explanation available. The way Windows creates bridges is that it creates a virtual adapter associated with the real adapter and sets the mac id as you described. It then proceeds to change its routing tables associated with that adapter so that it can form a bridge.

In short, no there doesn't seem to be any documented way to prevent that behavior.

share|improve this answer
But the address was not locally generated and is globally unique. There doesn't seem to be any reason the locally-administered bit was set. – David Schwartz Aug 5 '12 at 0:54
Nah, there is nothing stopping someone thing from using the same macid. Somewhere in the world there might be a program which generates this macid randomly and assigns it to an interface, out of pure coincidence you macid is no longer unique... The default macid are guaranteed to be unique for every interface as long as no one cheats :) – Xero Aug 5 '12 at 1:36
That's why what Windows does is so stupid. The hardware MAC address is guaranteed to be globally unique. Setting the "locally administered" bit produce a MAC address that is no longer guaranteed to be unique. – David Schwartz Aug 5 '12 at 1:45
@DavidSchwartz The hardware MAC address is guaranteed to be globally unique. For loose definitions of "guaranteed," perhaps. – HopelessN00b Aug 5 '12 at 3:56
Of course, all this is just convention. Convention dictates that any mac address that is manually generated must have the 7 most significant bit set as 1. There is no real guarantee anywhere, any one can come spoof their mac address to anything and mac address spoofing is a common attack vector on LANs. – Xero Aug 5 '12 at 7:39

You specifically ask for it in windows, but as an example you can do it in linux. As the whole networking stack is available to you through different tools like brctl, ifconfig, iproute2, and iptables.

sudo apt-get install bridge-utils

ifconfig eth0 up
ifconfig eth1 up

brctl addbr br0

ifconfig br0 hw ether 0e:9b:cd:a9:b5:aa

brctl addif br0 eth0
brctl addif br0 eth1

ifconfig br0 up

If it is a really needed, it should be quite quick and easy to set up a small link virtual machine to do this for you.

For some more info

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.