diff --git a/network/vif-qubes-nat.sh b/network/vif-qubes-nat.sh
index 57f588a..d422d8e 100755
--- a/network/vif-qubes-nat.sh
+++ b/network/vif-qubes-nat.sh
@@ -45,7 +45,9 @@ if test "$command" == online; then
     run ip netns add "$netns"
     run ip link set "$netns_appvm_if" netns "$netns"
 
-    run ip link add "$netns_netvm_if" type veth peer name "$netvm_if"
+    # keep the same MAC as the real vif interface, so NetworkManager will still
+    # ignore it
+    run ip link add "$netns_netvm_if" type veth peer name "$netvm_if" address fe:ff:ff:ff:ff:ff
     run ip link set "$netns_netvm_if" netns "$netns"
 
     netns ip6tables -t raw -I PREROUTING -j DROP