:global createRandomMac do={
  :local mac ""
  :local sep ""

  :for n from=1 to=6 do={
    :local oct [:convert [:rndnum from=0 to=255] from=num to=hex]

    # Ensure first octet ends in 2 to follow SLAP
    :if ($n = 1) do={
      :local b1 [:pick "$oct" 0 1]
      :set oct ("$b1"."2")
    }

    :set mac "$mac$sep$oct"
    :set sep ":"
  }

  :return "$mac"
}

:foreach wifi in [/interface/wifi/find where disabled=no] do={
  :local name [/interface/wifi/get value-name=name number=$wifi]
  :local oldmac [/interface/wifi/get value-name=mac-address number=$wifi]
  :local newmac [$createRandomMac]
  :put "Changing mac-address for wifi network '$name' from $oldmac to $newmac"
  /interface/wifi/disable numbers=$wifi
  /interface/wifi/set mac-address=$newmac number=$wifi
  /interface/wifi/enable numbers=$wifi
}

/interface/wifi
:foreach item in=[find] do={
    set $item mac-address="02$[:rndstr from="123456789ABCDE" length="10"]"
}

:local randBssid do={
  :local macOctets [:toarray ""]
  :local oct ""
  :for i from=0 to=[:len $bssid] do={
    :local chr [:pick $bssid $i ($i + 1)]
    :if ($chr = $macDelimiter) do={
      :set macOctets ($macOctets, $oct)
      :set oct ""
    } else={:set oct "$oct$chr"}
  }
  :set macOctets ($macOctets, $oct)
  :if ([:len $macOctets] != 6) do={
    :return ""
  }
  :foreach i in={1;2;3} do={
    :set ($macOctets->$i) [:rndstr from="123456789ABCDE" length=2]
  }
  :return [:serialize $macOctets delimiter=$macDelimiter to=dsv]
}

:global bssidRandomizerRunning

:if (!$bssidRandomizerRunning) do={
  :set bssidRandomizerRunning true

  :local bssids [:toarray ""]
  :local macDelimiter ":"
  :local maxIterations 100

  /interface/wifi
  :foreach i in=[find disabled=no] do={
    :local bssid [get $i mac-address]
    :local rBssid ""
    :local count 0
    :local found false
    :do {
        :set rBssid [$randBssid bssid=$bssid macDelimiter=$macDelimiter]
        :set count ($count + 1)
        :set found false
        :if ($rBssid != "") do={
          :foreach b in=$bssids do={
            :if (!$found && $b = $rBssid) do={:set found true}
          }
        }
    } while=($found && $count < $maxIterations)

    :if ($rBssid != "" && $count < $maxIterations) do={
      :set bssids ($bssids, $rBssid)
      set $i mac-address=$rBssid
    } else={
      :local ifName [get $i name]
      :if ($count = $maxIterations) do={
        :log warn "Unable to generate unique random MAC address (BSSID) for wifi interface '$ifName', max iterations reached (bug?), skipping..."
      } else={
        :log warn "Unable to parse MAC address (BSSID) '$bssid' set on wifi interface '$ifName', skipping..."
      }
    }
  }

  :set bssidRandomizerRunning
}