Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Bad Switch Mac Address

Posted on 2013-11-19
4
Medium Priority
?
381 Views
Last Modified: 2013-12-09
Hello,
I am currently having a problem in my network where there is a device that I’m not aware of that is trying to become the Root Switch, the Mac address of this device is  showing up as an manufacture I’m not using, Is there a good way to track down were the device could be located?

Thanks
0
Comment
Question by:ahmad1467
  • 2
4 Comments
 

Expert Comment

by:Dhurken
ID: 39660040
What model switches are you using?
0
 
LVL 12

Expert Comment

by:Infamus
ID: 39660150
If it is Cisco switch, you can run one of the following command depends on the version of IOS.

sh mac address-table address xxxx.xxxx.xxxx

sh mac-address-table address xxxx.xxxx.xxxx

This will tell you which switch port the MAC address is connected to.
0
 

Expert Comment

by:Dhurken
ID: 39660180
As a follow up to Infamus, if you have a larger infrastructure, you may end up hopping from switch to switch to track down the actual switchport where the device is connected.

If so, you can use sh cdp neighbors detail to see the other Cisco devices connected to your current switch.
0
 
LVL 17

Accepted Solution

by:
TimotiSt earned 2000 total points
ID: 39660334
If it does become the root switch, the STP 'root port' will point towards it.
As @Infamus says, you might find it in the mac table with 'sh mac address-table'.
But the main point would be to implement BPDU protection on the edge ports. BPDU-guard can shut down the port, in which case you can find the user without network access pretty quick (if that's accceptable in the organization)...
0

Featured Post

New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a how to to configure a UCS Ethernet-uplink portchannel via the console. It is easy to do and can be done quite quickly. In certain versions of the UCS manager the portchannel has issues coming up and this is a workaround. I am…
Network ports are the threads that hold network communication together. They are an essential part of networking that can be easily ignore or misunderstood, my goals is to show those who don't have a strong network foundation how network ports opera…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Suggested Courses
Course of the Month10 days, 22 hours left to enroll

886 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question