SpeedFusion NAT Mode MAC Addresses: How to Find Them and Reserve an IP

When a Peplink device connects to a SpeedFusion hub in NAT mode, the hub's DHCP server gives the device an IP address, as it would for any other client. To give the device the same address every time, you add a DHCP reservation on the hub, and a reservation needs the device's MAC address.

The tunnel doesn't present any of the device's physical MAC addresses. It uses a virtual MAC that starts with 52:00:00. This article shows how to find that MAC and use it to reserve an address.

In short

  • Every Peplink device has one SpeedFusion NAT-mode MAC address: 52:00:00 followed by six characters of its serial number.
  • It stays the same across reconnects, reboots and firmware upgrades. It changes only if the hardware is replaced.
  • Read it on the device under Status > Device > MAC Address > SpeedFusion NAT Mode, or work it out from the serial number.
  • Don't take it from the device's Client List, which shows the NAT-mode address with 00:00:00:00:00:00.

What the MAC address looks like

The format is 52:00:00:XX:YY:ZZ. To get the last three pairs from the serial number:

  1. Remove the dashes from the serial number.
  2. Skip the first two characters.
  3. Take the next six characters and split them into pairs.
Serial number Without dashes Characters 3 to 8 NAT-mode MAC
1930-A1B2-C3D4 1930A1B2C3D4 30 A1 B2 52:00:00:30:A1:B2

(This serial number is an example, not a real device.)

Peplink doesn't document this pattern, so check the MAC on the device's Status > Device page whenever you can.

Find it on the device

  1. Open the device's Web Admin, either directly or through InControl2's Remote Web Admin.
  2. Go to Status > Device.
  3. Under MAC Address, read the SpeedFusion NAT Mode row.

The serial number is on the same page, near the top, if you want to compare the two.

Status > Device page: the Serial Number row and the SpeedFusion NAT Mode row under MAC Address, highlighted
Status > Device: the serial number and the SpeedFusion NAT Mode MAC. Identifying details are blurred.

If your firmware doesn't show a SpeedFusion NAT Mode row, work the MAC out from the serial number as shown above.

Don't use the Client List

On the device itself, Status > Client List includes its own NAT-mode address as a SpeedFusion VPN entry, with the MAC address 00:00:00:00:00:00. That entry is the device's own tunnel address, not a client on its LAN, and the Client List doesn't show a real MAC for it. A reservation with this MAC won't match anything.

Status > Client List on the remote device: its SpeedFusion NAT-mode address listed with MAC 00:00:00:00:00:00
Status > Client List on the remote device: the NAT-mode address shows an all-zero MAC. Identifying details are blurred.

Reserve the address on the hub

On a FusionHub:

  1. Open the FusionHub's Web Admin and go to Network > DHCP Server.
  2. Under DHCP Reservation, fill in an empty row:
    • Name: something that identifies the device, such as its site name or serial number.
    • MAC Address: the device's 52:00:00 MAC.
    • Static IP: the address you want the device to have. Use an address in the hub's subnet that is outside the dynamic IP Range, so the hub never hands it to another device.
  3. Click Save, then Apply Changes.
FusionHub DHCP Server for Local Services: a DHCP Reservation row with a name, a 52:00:00 MAC address and a static IP
FusionHub, Network > DHCP Server: a reservation outside the dynamic range. Identifying details are blurred.

Applying the changes reconnects the SpeedFusion tunnels, and the device comes back on its reserved address. If it doesn't, reconnect the SpeedFusion profile on the device or reboot the device.

On a Peplink router acting as the hub, add the reservation to the DHCP settings of whichever network hands out the NAT-mode addresses.

Adding a new device

  • Before it first connects: work out its MAC from the serial number and add the reservation. The device gets its reserved address on its first connection.
  • If it has already connected: it will have an address from the hub's dynamic range. Add the reservation and apply the changes, and it moves to the reserved address.

Good to know

  • One MAC per device. Reconnects, reboots and firmware upgrades don't change it, so a reservation keeps working.
  • Replaced hardware has a new MAC. A replacement unit (for example, after an RMA) has a new serial number and therefore a new NAT-mode MAC. Update the reservation, or the new unit takes a dynamic address.
  • Two devices could share a MAC, but it's rare. The MAC uses only six of the serial number's twelve characters. If a reservation seems to go to the wrong device, compare the two serial numbers.
  • NAT mode only. This applies to SpeedFusion profiles that use NAT mode on the hub. Devices bridged at Layer 2 don't get an address from the hub's DHCP server.

Need help setting up reservations across a fleet? Submit a request and our team will help.



Have more questions? Submit a request