Consequently, this bit is 0 in all OUIs.Environment : This article applies to Aruba Mobility Controllers, Aruba Campus and Instant Access PointsĪPs advertise WLANs to wireless clients by sending out beacons and probe responses that contain the WLAN’s SSID and supported authentication and data rates. Therefore, it is a locally administered address. In the example address 06-00-00-00-00-00 the first octet is 06 (hex), the binary form of which is 00000110, where the second-least-significant bit is 1. If it is 1, the address is locally administered. If the bit is 0, the address is universally administered. This bit is also referred to as the U/L bit, short for Universal/Local, which identifies how the address is administered. Universally administered and locally administered addresses are distinguished by setting the second-least-significant bit of the first octet of the address. A locally administered address is assigned to a device by a network administrator, overriding the burned-in address. The remainder of the address (three octets for MAC-48 and EUI-48 or five for EUI-64) are assigned by that organization in nearly any manner they please, subject to the constraint of uniqueness.

The first three octets (in transmission order) identify the organization that issued the identifier and are known as the Organizationally Unique Identifier (OUI). A universally administered address is uniquely assigned to a device by its manufacturer. local Addresses can either be universally administered addresses or locally administered addresses. 04:02:1F -> HUAWEI TECHNOLOGIES CO.,LTD.Shouldn't '04:00:00' and '06:00:00' resolve on the OUI Lookup tool to the same organization? Given this if we disable that bit, we get the matching 'Universally Administered Address' 00000100 (Binary), 04 (Hex) -> '04:00:00', hence my question: In other words, if we convert 06 (Hex) to 00000110 (Binary), we can see that the U/L bit is set to one, which means that it a locally administered address. Wireshark and Wireshark OUI Looktup tool do not seem to recognize locally administrated OUIs.Īccording to the first 3 octets/first-half of a MAC-48/EUI-48 Address, correspond to the OUI (e.g.: MAC = 06:00:00:xx:xx:xx, OUI = 06:00:00), and the 2nd least significant bit of its first octet is used to differentiate 'Universally' and 'Locally' administered addresses).

Wireshark oui lokoup