Stable MAC address change process

1. A method comprising:

linking, at an access node, a first media control access (MAC) address of a device to a first identifier of the device different from the first MAC address to establish a communication session between the access node and the device;

during the communication session, receiving, at the access node, a first indication of a change of the first MAC address to a second MAC address;

linking, at the access node, the second MAC address to the first MAC address and the first identifier;

receiving, at the access node, a communication from the device using the second MAC address while maintaining the communication session;

receiving, at the access node, a second indication that the device will change the first identifier to a second identifier; and

in response to the second indication, communicating the second MAC address and the second identifier to an identity provider of the device.

2. The method of claim 1 , further comprising communicating, by the access node, the second MAC address and the first identifier to the identity provider of the device after linking the second MAC address to the first identifier.

3. The method of claim 2 , further comprising, in response to communicating the second MAC address and the first identifier to the identity provider, receiving, at the access node and from the identity provider, the second identifier.

4. The method of claim 1 , further comprising communicating, by the access node and to the device, an indication of a MAC address rotation scheme that is supported by the access node.

5. The method of claim 1 , further comprising:

allotting a budget of MAC address changes to the device; and

communicating an alert to the device when the device attempts to change a MAC address in excess of the budget.

6. The method of claim 1 , further comprising locating a decryption key of the device based on the first indication.

7. An access node comprising:

a memory; and

a hardware processor communicatively coupled to the memory, the hardware processor configured to:

link a first media control access (MAC) address of a device to a first identifier of the device different from the first MAC address to establish a communication session between the access node and the device;

during the communication session, receive a first indication of a change of the first MAC address to a second MAC address;

link the second MAC address to the first MAC address and the first identifier;

receive a communication from the device using the second MAC address while maintaining the communication session;

receive a second indication that the device will change the first identifier to a second identifier; and

in response to the second indication, communicate the second MAC address and the second identifier to an identity provider of the device.

8. The access node of claim 7 , wherein the hardware processor is further configured to communicate the second MAC address and the first identifier to the identity provider of the device after linking the second MAC address to the first identifier.

9. The access node of claim 8 , wherein the hardware processor is further configured to, in response to communicating the second MAC address and the first identifier to the identity provider, receive, from the identity provider, the second identifier.

10. The access node of claim 7 , wherein the hardware processor is further configured to communicate, to the device, an indication of a MAC address rotation scheme that is supported by the access node.

11. The access node of claim 7 , wherein the hardware processor is further configured to:

allot a budget of MAC address changes to the device; and

communicate an alert to the device when the device attempts to change a MAC address in excess of the budget.

12. The access node of claim 7 , wherein the hardware processor is further configured to locate a decryption key of the device based on the first indication.

13. An access node comprising:

a memory; and

a hardware processor communicatively coupled to the memory, the hardware processor configured to:

during a communication session with a device, receive a first indication of a change of a first MAC address to a second MAC address;

link the second MAC address to the first MAC address and a first identifier of the device different from the first MAC address and the second MAC address;

receive a communication from the device using the second MAC address while maintaining the communication session;

receive a second indication that the device will change the first identifier to a second identifier; and

in response to the second indication, communicate the second MAC address and the second identifier to an identity provider of the device.

14. The access node of claim 13 , wherein the hardware processor is further configured to communicate the second MAC address and the first identifier to the identity provider of the device after linking the second MAC address to the first identifier.

15. The access node of claim 14 , wherein the hardware processor is further configured to, in response to communicating the second MAC address and the first identifier to the identity provider, receive, from the identity provider, the second identifier.

16. The access node of claim 13 , wherein the hardware processor is further configured to communicate, to the device, an indication of a MAC address rotation scheme that is supported by the access node.

17. The access node of claim 13 , wherein the hardware processor is further configured to:

allot a budget of MAC address changes to the device; and

communicate an alert to the device when the device attempts to change a MAC address in excess of the budget.