I am trying to get rid of the exact model number of used devices for wifi.
Depending on the used app (on android for example), the mac adress is used to find the vendor of the product from the database. Sometimes it only translates to "routerboard.com", somtimes to the exact model.
My goal is to enhance security to not directly show which hardware is beeing used in the first place.
I tried to change the radio mac, but this keeps beeing overwritten, as soon as I connect the cap to the capsman again, as it uses the radio mac, not the wifi mac I can set.
Is there a way to edit the radio mac? (firmware, most likely not?!)
Is there a way to spoof the mac beeing shown to the outside from the access points controlled via capsman?
Need mikrotik itself help to not show these informations?
If there is an idea, how I can get rid of these additional informations about the wifi network to the outside?
Hardware used:
CCR2004-16G-2S+ (capsman)
AP devices are some (hap ac2 and hap ax3)
You could try to set action=create-enabled in provisioning rules on CAPsMAN ... this action (instead of default action=create-dynamic-enabled makes it possible to set certain things manually (either on CAP locally or on CAPsMAN but will allow the manual setting "survive" reboot). This is certainly true for e.g. wifi interface name (which is also propagated into /interface list on CAPsMAN but not on CAPs themselves).
So after changing provisioning action (and possibly reprovisioning CAP), set wifi interface's MAC address (try on CAPsMAN first).
Don't waste too much time.
It's still possible to find the model with some programs that don't just check the MAC address but also read the information contained in the radio transmission.
@mkx I wasn't able to keep a changed mac from the cap interface.
As soon as it was in a capsman enviroment again, it changed to the radio-mac.
@rextended
Thanks for bringing this up. With the right tools, this is not going to stop someone.
It is meant for beginner hacker, looking for an easy way to manipulate, if the correct model is known.
If there are any ideas on how to achieve the goal, I am all ears.
Tell me what makes you think a hacker who reads "MikroTik" or "TP-Link" doesn't also try ALL methods for ALL brands for ALL products...
A matter of seconds.
Do you really think they won't try RouterOS tools just because they don't read "RouterBOARD"???
The security of your machine depends first and foremost on the firewall's security,
then on the active services,
then on the configuration access method.
The drivers are those of the manufacturers, WPA2 and WPA3 are the standards,
so there's little else to do...