troubleshooting Question

Possible HSRP issue on Nexus 9000 Series Switches

Avatar of Brad Sims, CCNA
Brad Sims, CCNAFlag for United States of America asked on
NetworkingSwitches / HubsCisco
1 Comment1 Solution167 ViewsLast Modified:
I am trying to troubleshoot an issue we're having with Nexus 9000 switches and an ASA 5585 Firewall.  Our network access control software is reporting a machine at an IP address of x.x.107.100.  I can't ping that address from behind the firewall or on the user network.

I looked at some packets from the firewall and my laptop, but just have a question about the Nexus packet flow.

HSRP is enabled, and my laptop sends the packet to the destination mac 0000.0c07.ac01 (core switch HSRP MAC).  Is the Nexus switch supposed to replace this MAC address with a physical MAC address?  The firewall sees the packet coming from the active router's physical interface MAC.  I thought from CCNA studies that the packet would use that virtual MAC and the HSRP router would sort out (load-balance) once it got the packet back?
ASKER CERTIFIED SOLUTION
Soulja
Sr.Net.Eng
Join our community to see this answer!
Unlock 1 Answer and 1 Comment.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 1 Comment.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros