It's in the article. He spoofs the MAC address to trick the gateway into thinking the attacker is the victim.