Frequently asked questions
How to recognise a Microsoft Hyper-V's virtual machine by its MAC address?
Summary
| # | Range or Prefix | Vendor | Virtual Machine |
|---|---|---|---|
| 1 | 00:15:5d | Microsoft | Hyper-V |
OUIs registered by Microsoft Corp
There are 41 OUI registered by Microsoft Corp:
| OUI |
Assignment Type |
|---|---|
| 70:BC:10 | MA-L |
| B8:31:B5 | MA-L |
| F0:6E:0B | MA-L |
| CA:12:5C | MA-L |
| F0:1D:BC | MA-L |
| EC:83:50 | MA-L |
| EC:59:E7 | MA-L |
| D4:8F:33 | MA-L |
| D0:92:9E | MA-L |
| C8:3F:26 | MA-L |
| C4:9D:ED | MA-L |
| BC:83:85 | MA-L |
| B8:4F:D5 | MA-L |
| 9C:AA:1B | MA-L |
| 9C:6C:15 | MA-L |
| 98:5F:D3 | MA-L |
| 94:9A:A9 | MA-L |
| 84:63:D6 | MA-L |
| 80:C5:E6 | MA-L |
| 74:E2:8C | MA-L |
| 5C:BA:37 | MA-L |
| 48:86:E8 | MA-L |
| 48:50:73 | MA-L |
| 3C:83:75 | MA-L |
| 2C:54:91 | MA-L |
| 2C:29:97 | MA-L |
| 28:18:78 | MA-L |
| 28:16:A8 | MA-L |
| 20:A9:9B | MA-L |
| 20:62:74 | MA-L |
| 14:9A:10 | MA-L |
| 10:2F:6B | MA-L |
| 0C:E7:25 | MA-L |
| 0C:41:3E | MA-L |
| 00:25:AE | MA-L |
| 00:22:48 | MA-L |
| 00:1D:D8 | MA-L |
| 00:17:FA | MA-L |
| 00:15:5D | MA-L |
| 00:12:5A | MA-L |
| 00:03:FF | MA-L |
Only one of them is known to be used by the Hyper-V Virtual Machines – 00:15:5d.
Detection Rule 1
Affects products: Hyper-V Virtual Machines
Signature: OUI is 00:15:5d
Conditions
For dynamic allocation, MAC addresses' range could be set in Hyper-V preferences.
The default MAC address is calculated on the first start:
- The first three octets (aa-bb-cc) are Microsoft's IEEE organizationally Unique Identifier, 00:15:5D (which is common on all Hyper-V hosts).
- The next two octets (dd-ee) are derived from the last two octets of the server's IP address.
- The last octet (ff) is randomly generated from the range 0x0 – 0xFF.
Administrator can also set any static MAC address manually:
References
- Managing MAC Address Pools in Hyper-V R2
- Windows Hyper-V server has a default limit of 256 dynamic MAC addresses
- How to Solve MAC Address Conflict on Hyper-V
- Virtual machine MAC addresses
Example MACs generated
- 00:15:5d:01:8d:00
- 00:15:5d:01:8d:01
- 00:15:5d:01:8d:02
Tested on
- Windows Server 2012 R2
Virtual Machine’s MAC ranges
Trusted by the following companies
and many more...