ok, here is the script I used with SManager. (I think)
Note: This should only be used for home network specific identification of this person's daughters tablet as he requested. Spoofing in general is illegal in most states and countries. Thankfully modern routers have build in spoofing detecting, so the old fashioned back door to WPA2-PSK has been firmly closed
In any case, your *original* MAC address will always appear in the router log during the initial association with the router.
The secondary MAC address will only be used once a connection is made with the router.
you will need to be rooted and have busybox installed, and this is mostly from memory, so your mileage may vary. Run the script *before* you hook it into your boot sequence. Check the routers connected MAC addresses to make sure it looks identifiable. Use plenty of zeros so you can spot it easily.
// to make it look like an Epson device
#!/system/bin/sh
ip link set wlan0 address A0:E4:53:00:A1:00
// An Apple Device
#!/system/bin/sh
ip link set wlan0 address 28:cf:dA:00:A1:00
// Generic - made up
#!/system/bin/sh
ip link set wlan0 address 00:80:48:00:A1:00
wlan0 (zero) will only be available using a wifi connection.
I still think restricting access to het tablet to specific "tablet time" is a better solution.