Check out AT&T's Valentine's Day Gift Guide for ideas & deals on the new Samsung Galaxy S23!
Protect yourself online
cosmicIT's profile

New Member

 • 

3 Messages

Tuesday, November 1st, 2022 8:04 AM

Why 3 different MAC addresses for BGW 210?

The BGW-210 router web configuration page lists a MAC address that ends in :A1 for the router under the broadband tab.  When I conduct a network scan from a laptop that is wired into the router, I receive MAC addresses that end in :A0 and :A2, both saying they are the Arris router.  Why can't I see the A1 and why are there 3 different ones?  Is there one for the ethernet ports, one for the wireless port, and 1 for the WAN port?

ATTHelp

Community Support

 • 

207.9K Messages

3 months ago

Let's help clear this up, @cosmicIT!

 

Your gateway's device list will show the MAC addresses of each device connected (or past connected) to the gateway. The three different mac addresses you see represent your 2.5 GHz, 5 GHz, and the Ethernet port.

 
If you're concerned about other devices connecting to your network, we recommend that you enable MAC filtering. When you enable MAC address filtering, only the  devices that you've enabled can connect to your network.
 
Let us know if you have any other questions!
 
Lacey, AT&T Community Specialist 

New Member

 • 

3 Messages

3 months ago

Thank you for the reply.  Any idea why the router would need 2 internal IP addresses (in addition to the WAN IP)?  It has the local IP address that I assign it (192.168.1.A), and then one of the other router MAC addresses also has a DHCP IP address too (192.168.1.B) that changes when the lease runs out.  Both of those IP addresses and associated MACs show up in multiple different scans I have done on the internal network.  Both of them identify as Arris MAC addresses so they both must be in the router.  The MAC address and IP address that is getting the DHCP IP address shows a port scan output that is suspicious:

PORT      STATE         SERVICE       VERSION
68/udp    open|filtered dhcpc
111/udp   open          rpcbind       2 (RPC #100000)
| rpcinfo: 
|   program version    port/proto  service
|   100000  2            111/tcp   rpcbind
|   100000  2            111/udp   rpcbind
|   536870913 1            724/tcp   SLSd_daemon
|_  536870914 1            709/tcp   
786/udp   open|filtered concert
1050/udp  open|filtered cma
1058/udp  open|filtered nim
1484/udp  open|filtered confluent
5000/udp  open|filtered upnp
9001/udp  open|filtered etlservicemgr
17754/udp open|filtered zep
17939/udp open|filtered unknown
19728/udp open|filtered unknown
20366/udp open|filtered unknown
21514/udp open|filtered unknown
48761/udp open|filtered unknown
63420/udp open|filtered unknown
MAC Address: 84:BB:69:DA:D7:A2 (Arris Group)

Just trying to rule out something rogue inside the router or connected to the network.

Thanks.

Kyle

ATTHelp

Community Support

 • 

207.9K Messages

3 months ago

Thank you for that information. @cosmicIT!

 

For further assistance with your concerns, we recommend you reach out to our Hometech Protect team as they are our premium support team. We thank you for your understanding.

 

Don't hesitate to reach back out if you ever need our assistance again. Thank you for visiting the AT&T Community Forums!

 

CalebP, AT&T Community Specialist

New Member

 • 

3 Messages

3 months ago

From what I see on the Hometech website, they are only worried about helping with devices you own.  I am talking about the ATT Arris router.  Can you at least verify if there should be 2 components inside of the Arris DSL routers that require internal ip addresses?  I have already ruled out any external connection.

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.