Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The IPV6 protocol has a feature called "Extended Unique Identifier" or EUI-64 witch in short uses the MAC address of the network card when choosing an IPV6 Adress.

Proof: at 7:36 video time.

If you want to be anonymous on the internet (so that nobody can find you when you download something, etc.) you need this EUI-64 to be bipassed in order for the MAC address not to be discovered by harmful third parties on the internet and for privacy.

How do you avoid EUI-64 MAC address usage in IPV6 selection in Ubuntu? Also for DHCP IPV6?

share|improve this question
up vote 6 down vote accepted

Omitting the MAC address improves your privacy, but it doesn't "make you anonymous". Every (IPv4 or IPv6) network still has a unique prefix, otherwise you wouldn't be able to receive any packets.

In any case, this site shows how to enable the randomized suffix:

share|improve this answer
Thank you for the answer. – iugamarian Dec 21 '10 at 23:50
Just to "round out" this question, would using a spoofed MAC (ifconfig hw ether on NICs that support it for example) along with the rfc4941 extensions enabled further improve privacy or does the IPv6 stack still create the address using the actual NIC's MAC instead of the spoofed one? – bumbling fool Feb 10 '11 at 4:14
@bumbling fool It wouldn't increase privacy. Computers outside your LAN never see your MAC (unless it is part of your IP address). MAC addresses are like a computer's name. If you are in a room and someone says your name, it gets your attention and you listen. Computers on a LAN listen for packets with their name and usually ignore the rest. As soon as your traffic is routed (like a person standing in a doorway and passing on a message) your MAC is replaced by the router's MAC and your IP address is used to tell where the traffic should go. MAC spoofing is for being "anonymous" on a LAN only. – Azendale Jul 8 '11 at 4:34


gksudo gedit /etc/sysctl.conf

Add the following line to the end of the file:


(use the following instead if you want this for all interfaces and are willing to restart)


Save the file and close Gedit.
Run sudo sysctl -p (or if you did the optional part restart).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.