Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Cisco MAC address finding

Posted on 2016-10-24
5
Medium Priority
?
227 Views
Last Modified: 2016-11-01
I am trying to locate an host IP address and I got to this switch. Can the experts explain the output below:

sw3750x#show mac address-table address 1234.5678.9012
Unicast Entries
 vlan   mac address     type        protocols               port
-------+---------------+--------+---------------------+--------------------
 100    1234.5678.9012    static ip,ipx,assigned,other Switch                
 101    1234.5678.9012    static ip,ipx,assigned,other Switch            

Thanks
0
Comment
Question by:leblanc
  • 3
  • 2
5 Comments
 
LVL 31

Expert Comment

by:Predrag
ID: 41857993
That is MAC address of a switch, more specifically - interface VLAN.
MAC address of SVIs are the same for all VLANs.
0
 
LVL 1

Author Comment

by:leblanc
ID: 41858023
I am trying to locate the port where that MAC address came from. So if I understand correctly, the location of the MAC address is the SVI of the Switch. Correct? So I will not be able to find the port number for that MAC address. Correct?
0
 
LVL 31

Expert Comment

by:Predrag
ID: 41858667
Correct?
Yes. your problem is that gateway is overwriting original MAC address.
So I will not be able to find the port number for that MAC address
Not correct. If you issue
# sh ip arp
On that device where you see that MAC address you can see IP - MAC connection and to what VLAN it belong (IP address range). Then, you can find device by original MAC address prior to L3 device replace it. Just follow it downstream inside of VLAN. :)

MAC address is only locally significant, every L3 device is overwriting it. Only in originating VLAN (network) you can see source's original MAC address.
0
 
LVL 1

Author Comment

by:leblanc
ID: 41859597
That was what I did to find the port that learnt that MAC address and as you can see, the port is Switch.
0
 
LVL 31

Accepted Solution

by:
Predrag earned 2000 total points
ID: 41859705
If traffic is generated by switch... that's it.
(IP address of an SVI matches source IP address in packets).
GAME OVER :)
If you want to be sure/change what SVI should generate traffic you can configure source-interface per traffic type with command(s):
ip radius source-interface
ip tacacs source-interface
ip ssh source-interface
ip ftp source-interface
etc
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question