Link to home
Start Free TrialLog in
Avatar of eggster34
eggster34

asked on

Strange MAC address spoofing problem

Hi there,
I have a Cisco ASA 5520 firewall, where ethernet0/1 is connected to a cisco catalyst 2960 switch.
I also have a Cisco 3670 router, connected to the same switch. The Cisco router terminates several frame relay connections.

Randomly, I see entries such as this on my cisco router when I issue the sh arp command:

Internet  192.168.112.1        17   0f3b.d8bd.4162  ARPA   Vlan2

The Vlan2 interface on my router is the one connected to the catalyst switch, and the MAC address above belongs to the ethernet0/1 interface on my ASA, so for some reason, although 192.168.112.0 is a frame network connected to an interface on my router, the switch somehow advertises that network to be reachable through my ASA.

I cannot use this guide since my switch OS does not support the vlan access-map command. What would you suggest me to do?


http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration_example09186a0080470c39.shtml
ASKER CERTIFIED SOLUTION
Avatar of Les Moore
Les Moore
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial