By Manny Fernandez

March 21, 2026

Decoding the Alphabet Soup: A Guide to macOS Network Interface Naming

This blog post explores the logic behind how macOS names its network interfaces, how it has changed over the years, and how you can take control of it using the command line.  I did a similar post about Netplan on Linux interface naming if you want to check that out.  If you’ve ever typed ifconfig into a Mac Terminal, you’ve likely been greeted by a wall of text featuring names like en0, lo0, and the mysterious awdl0. Unlike Linux, which often uses descriptive names like eth0 or wlan0 (or the newer predictable naming like enp3s0), macOS follows a convention rooted deeply in its Unix heritage.

The Historical Roots: From NeXTSTEP to Tahoe

macOS is built on Darwin, which is a hybrid of the Mach microkernel and the FreeBSD operating system.  Darwin is the basis for macOS, watchOS, iOS, & tvOS.   Because of this, macOS inherits the BSD style of interface naming.

  • The “en” Legacy –  In the early days of networking, en stood for Standard Ethernet. On the original Macintosh computers with built-in Ethernet, en0 was always the physical RJ45 port.

  • The Wi-Fi Takeover – As Apple moved toward a wireless-first world, the naming convention stayed, but the hardware shifted. On modern MacBooks that lack a built-in Ethernet port, en0 is almost always the Wi-Fi card.

  • The Expansion: With the introduction of Thunderbolt and USB-C, additional physical interfaces are simply incremented: en1, en2, etc., regardless of whether they are a Thunderbolt-to-Ethernet adapter or a virtual interface.

Common Interface Types You’ll See

Beyond the standard Ethernet/Wi-Fi (enX), here is what the others actually do:

Name Type Description
lo0 Loopback The internal “localhost” (127.0.0.1). Used for local testing.
awdl0 Apple Wireless Direct Link Used for AirDrop, AirPlay, and Sidecar.
utunX User Tunnel Typically created by VPN clients (like WireGuard or Tailscale).
bridge0 Bridge A virtual switch, often used for Thunderbolt Bridge or VM networking.
p2p0 Peer-to-Peer Historically used for Wi-Fi Direct features.

Nuances & “Gotchas”

  • Order Matters – macOS assigns en numbers based on the order the drivers are initialized during boot. If you use a lot of external dongles, en3 today might be en4 tomorrow if you plug them in differently.

  • Service Order vs. BSD Name – In System SettingsNetwork, you can change the “Service Order” (which interface the Mac prefers for internet). However, changing this does not rename the interface in ifconfig. en0 remains en0 even if it’s at the bottom of the priority list.
  • The “Phantom” Interfaces – You might see dozens of utun or anpi interfaces. These are often internal Apple protocols (like Apple Network Protocol Interface) used for communication between the CPU and the Secure Enclave or the Liquid Glass UI components.

Command Line Tools to Check Your Setup

Don’t rely solely on ifconfig; macOS has specialized tools that provide “friendly” names.

  • networksetup -listallhardwareports: This is the best way to map a BSD name (like en0) to its physical hardware (like “Wi-Fi”).

  • scutil --nwi: Shows the “Network Information” and tells you which interface is currently the “primary” one being used for the default gateway.

  • ifconfig -v en0: Provides a more verbose output for a specific interface, including its status and supported media types.

I use TextExpander which allows you to enter an abreviated command and it expands it into something more useful.  So if I go to my command line, and type ; and getip It runs

ifconfig | grep inet

Recent posts

  • If you've spent any time configuring user authentication on... Full Story

  • DNS is one of those technologies that quietly underpins... Full Story

  • BGP issues on FortiGate firewalls usually trace back to... Full Story

  • Every time your laptop talks to your router, a... Full Story

  • If you've spent any time configuring NAT on a... Full Story

  • If you have spent any time configuring firewall policies... Full Story

  • High availability on FortiGate is one of those features... Full Story

  • If you've configured SD-WAN on a FortiGate, you've almost... Full Story

  • FortiLink is the management protocol that turns a FortiSwitch... Full Story

  • FortiSwitches are pretty rock solid from Mean Time Between... Full Story

  • This is a quicky tip.  Have you ever gone... Full Story

  • DNS is one of those quiet pieces of internet... Full Story

  • This article is an updated version of the previous... Full Story

  • You will add ns2 as a secondary (slave) BIND9... Full Story

  • In the process of deploying my lab, I needed... Full Story

  • RFC 8805, used to be known as Self-Correcting IP... Full Story

  • Years back, I wrote an article about certificate pinning. ... Full Story

  • FortiGates have the ability to send alerts to Microsoft... Full Story

  • In this post, I am going to walk through... Full Story

  • Troubleshooting VoIP on a FortiGate can feel like trying... Full Story

  • Prior to FortiOS 7.0, there were three commands to... Full Story

  • In this post, I am going to go over... Full Story

  • What we are going to do:  We are going... Full Story

  • Choosing between FGCP (FortiGate Clustering Protocol) and FGSP (FortiGate... Full Story

  • Creating a VLAN on macOS (The "Pro" Move) A... Full Story

  • This blog post explores the logic behind how macOS... Full Story

  • Pretty Fly for a Wi-Fi Tell My Wi-Fi Love... Full Story

  • Part of my daily gig is creating BoMs (Bill-of-Materials)... Full Story

  • ICMP introduces several security risks, but careful filtering, rate... Full Story

  • The command diag debug application dhcps -1 enables full... Full Story

  • In the world of FortiOS, execute tac report is... Full Story

  • LLDP; What is it The Link Layer Discovery Protocol... Full Story

  • What it actually does When you run diagnose fdsm... Full Story

  • Monkey Bites are bite-sized, high-impact security insights designed for... Full Story

  • I have run macOS in macOS with Parallels but... Full Story

  • Don't be confused with my other FortiNAC posts where... Full Story

  • This is the third session in a multi-part article... Full Story

  • Today I was configuring key-based authentication on a FortiGate... Full Story

  • Netcat, often called the "Swiss Army knife" of networking,... Full Story

  • At its core, IEEE 802.1X is a network layer... Full Story

  • In case you did not see the previous FortiNAC... Full Story

  • This is our 5th session where we are going... Full Story

  • Now that we have Wireshark installed and somewhat configured,... Full Story

  • The Philosophy of Packet Analysis Troubleshooting isn't about looking... Full Story

  • 1. High-Level Overview The FortiGate Wireless Intrusion Detection System... Full Story

  • What MIMO Actually Does Multiple Input, Multiple Output (MIMO)... Full Story

  • A practitioner's tour of the diagnose, test, and fnsysctl... Full Story