![]() ![]() So at this point I still can't see the switchport the broadcast MAC is coming from. S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,ĭ - Remote, C - CVTA, M - Two-port Mac Relay ![]() If I repeat the process, I will go back to seeing the MAC learned from mysite-suc-sw port f3/2. So this points to the secondary layer 3 switch which is doing route. Total Mac Addresses for this criterion: 1 Mysite-suc-sw#show mac address-table address 0015.211c.1e89 I did 'show mac-address-table' and 'show arp' on them and I see no MAC 0015 there though. Observation:I have 2 other 2960 switches connected via trunk to such mysite-suc-sw with all ports also on vlan3. S - Switch, H - Host, I - IGMP, r - Repeater, P - Phoneĭevice ID Local Intrfce Holdtme Capability Platform Port ID +-+-+-+-ģ 0015.211c.1e89 dynamic ip FastEthernet3/2Ĭapability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge Mysite-suc-gw1#show mac-address-table address 0015.211c.1e89 Or someone has installed a device from that company Well it is also possible that some device has a fake MAC address and it using this OUI. Looking for the web page of this company, you can discover they sell also badge readers for access control. On layer3 devices only the C2960 cannot have it in ARP table unless their management IP address is in the same Vlan 3.Īnother important tool in this kind of search is to identify the vendor from the first 3 bytes of MAC address (OUI)īy inserting the OUI in format HH-HH-HH or simply HHHHHH Unfortunately not getting an answer it will be silent and will be removed from CAM tables within 300 seconds If it is not enabled the device is simply trying to get an answer from a DHCP server with bootp. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |