I've been looking at traffic logs generated by a Pulse Secure appliance (formerly Juniper Pulse Secure) and have noticed that when the appliance generates a MAC Address it prefixes that address with
55:4E which ends up looking like
This is inference based on what I know of my environment, but also have found anecdotal reference of Juniper Pulse Secure utilizing
55:4E in a post from 2014 entitled Who Uses the 55:4e:20 MAC OUI? Further at least according to this OUI list Juniper doesn't have an OUI prefixed with
55:4E (neither does Pulse Secure or anyone else).
From my admittedly limited understanding
55:4E doesn't seem to conform to the "locally administered addresses are distinguished by setting the second-least-significant bit." Which to my mind means that there are four Locally Administered Address Ranges:
Which leads me to my questions:
- Doesn't this practice have the potential for causing major issues in case an OUI starting with
55:4Eis purchased in the future?
- Can the Pulse Secure appliance be configured to use a locally administered address?
- Is there a standard that makes this practice okay that I've missed?