Solved

Cisco MAC address finding

Posted on 2016-10-24
5
85 Views
Last Modified: 2016-11-01
I am trying to locate an host IP address and I got to this switch. Can the experts explain the output below:

sw3750x#show mac address-table address 1234.5678.9012
Unicast Entries
 vlan   mac address     type        protocols               port
-------+---------------+--------+---------------------+--------------------
 100    1234.5678.9012    static ip,ipx,assigned,other Switch                
 101    1234.5678.9012    static ip,ipx,assigned,other Switch            

Thanks
0
Comment
Question by:leblanc
  • 3
  • 2
5 Comments
 
LVL 27

Expert Comment

by:Predrag Jovic
ID: 41857993
That is MAC address of a switch, more specifically - interface VLAN.
MAC address of SVIs are the same for all VLANs.
0
 
LVL 1

Author Comment

by:leblanc
ID: 41858023
I am trying to locate the port where that MAC address came from. So if I understand correctly, the location of the MAC address is the SVI of the Switch. Correct? So I will not be able to find the port number for that MAC address. Correct?
0
 
LVL 27

Expert Comment

by:Predrag Jovic
ID: 41858667
Correct?
Yes. your problem is that gateway is overwriting original MAC address.
So I will not be able to find the port number for that MAC address
Not correct. If you issue
# sh ip arp
On that device where you see that MAC address you can see IP - MAC connection and to what VLAN it belong (IP address range). Then, you can find device by original MAC address prior to L3 device replace it. Just follow it downstream inside of VLAN. :)

MAC address is only locally significant, every L3 device is overwriting it. Only in originating VLAN (network) you can see source's original MAC address.
0
 
LVL 1

Author Comment

by:leblanc
ID: 41859597
That was what I did to find the port that learnt that MAC address and as you can see, the port is Switch.
0
 
LVL 27

Accepted Solution

by:
Predrag Jovic earned 500 total points
ID: 41859705
If traffic is generated by switch... that's it.
(IP address of an SVI matches source IP address in packets).
GAME OVER :)
If you want to be sure/change what SVI should generate traffic you can configure source-interface per traffic type with command(s):
ip radius source-interface
ip tacacs source-interface
ip ssh source-interface
ip ftp source-interface
etc
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question