Any one can help to deploy the topology of network, -----its connection ?

Hi, Two ASA firewalls work as failover. We suppose the primary ASA1 inside interface ip address is 192.168.1.1/24. From Catalyst 6509, we can see the ip address 192.168.1.1 and its mac address(both are from the ASA1) through show ip arp in the 6509. But when we show cdp neighbor in the 6509, we cannot see the ASA firewall. In the ASA1, we can see the 6509' ip address(vlan) and mac by show arp. Showing mac-address table in 6509 can not indicate the its relative port. So we do not know which port in the 6509 is connect to the ASA1. My question is how we can know which port in 6509 connect to the ASA1 ? Thank you
eemoonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

giltjrCommented:
ASA's don't do CDP.  I'm fairly sure tha doing show mac-address-table on the 6509 should show you which port the MAC address is being seen on.  What does the it show you?  Can you post the output filtering just the ASA's mac?
0
Pete LongTechnical ConsultantCommented:
The ASA does not support CDP.

Heres me locating my Active ASA on the Core Switch

locate ASA
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kevinhsiehCommented:
sh arp will get you the mac address, but
show mac address-table | include 7c0e.ce52.a0f2

Open in new window

will show you where that mac address is connected
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

eemoonAuthor Commented:
Hi Thank all of you for reply. The following is output, most of them do not show port except Te9/8


C6509#sh mac-address-table | section 78w1.b5w1.www7
*   6  0000.0c07.ac00   dynamic  Yes          0   Po11
*   7  0000.0c07.ac00    static  No           -   Router
*   6  0000.0c07.ac00   dynamic  Yes          0   Po11
*   6  0000.0c07.ac00    static  No           -   Router
*   3  0000.0c07.ac00    static  No           -   Router
   11  78w1.b5w1.www7   dynamic  Yes          5   Te9/8
0
giltjrCommented:
Not sure what "section" does, you should use "include".  Also not sure what '78w1.b5w1.www7'  is suppsoed to be, but that is not a mac address.  MAC addresses are in hex and thus can only contain the characters 0-9 and A-F.
0
kevinhsiehCommented:
I gave you the exact syntax to use on your switch with the mac address that you are looking for. Just copy/paste.
0
giltjrCommented:
O.K, "section" is apparently a valid (but optional) "pre command" to include or exclude.  Never seen it before.  This is why EE is great because you can still learn stuff no matter how long you have been doing this.

However I am now confused.  eemon originally posted, but then PeteLong posted as if he were the original poster, which has the mac address that keveinhsieh include is the command that should be used.

What confuses me even more is that eemon has another question posted:

http://www.experts-exchange.com/Hardware/Networking_Hardware/Routers/Q_28678010.html

That seems to deal with the same MAC address of 78e1.b511.2827, 78w1.b5w1.www7 seems to be a "masked" copy of that mac.

eemon are you and PeteLong the same person?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.