This allows us to give slightly different web filtering for PCs and iPads, which we need to do for reasons I will not go it here. we use DHCP to assign ip addresses depending on mac address. If it's the same person every time, then it's a pretty good chance that it's their device and always has been their device that you're seeing in your logs. You could always block it every so often from your wireless access points and see who comes complaining.

To be truly secure, a device implementing MAC randomization should actually pick an address randomly from a pool and routinely change the MAC it uses after a certain amount of time but, seeing as such things have routinely been found lacking among various wireless devices, I wouldn't be all that surprised if this is actually the same device every time. However, it could also just so happen that entirely different devices happened to pick up that same address because they are both programmed to use the first unclaimed MAC that local address pool that the can get their hands on. It could be that it is the same device and it just hasn't rotated the MAC address yet because it's never been disconnected and never forced a change of the MAC since it initially connected.

That would depend on how the MAC selection process is implemented on the device. If this MAC address pops up again, could it be a different device? It's popping up again on our network and I don't want to get a random person in trouble.

How to find my mac address on my ipad