Unanswered Question
Sep 11th, 2007
User Badges:

Does anyone know of any oid or mib that maps a mac address of ip address that a switch knows about, to a port? I am having some problems with some nasty hosts but I can not find them.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
avmabe Tue, 09/11/2007 - 13:13
User Badges:
  • Bronze, 100 points or more

Can you telnet to the switch and login? if so you can track down the ip/mac by doing a show cam or show mac-address-table for the specific mac address.

MZydorczyk2 Wed, 09/12/2007 - 05:50
User Badges:

No, unfortunately I cant. My director does not give me access to the switches to actually log in. If I had access it would help a lot with troubleshooting and stuff like that. And he does not like for me to come to him whenever I need to try and find something because he has to login himself. So is there any snmp things that could help me?

avmabe Wed, 09/12/2007 - 05:52
User Badges:
  • Bronze, 100 points or more

I don't know of a way to track mac/ip arp entries through snmp.

What are you trying to find? What are the hosts doing? maybe that will help.

And this is something that is just tough, because if you are expected to track these hosts down, someone has to login and see what ports the mac addresses show up on.

MZydorczyk2 Wed, 09/12/2007 - 06:08
User Badges:

Yeah you're tellin' me. But unfortunately I am only a student worker here at my university so I know he doesnt want to give a student access to 10 switches. And unfortunately I am the only one who is experienced with cisco (not even him) and he is the only one with access.

Anyway...we are getting an exceedingly large amount of arp traffic. Particularly from 2 hosts.

We have macnotification sending traps and he thinks i should be able to look at that and find answers, how i dont know. So yeah that is about all I have to go off of...which is nothing.

avmabe Wed, 09/12/2007 - 06:10
User Badges:
  • Bronze, 100 points or more

what kind of switches?

get the mac addresses written down that you know are spewing the arps.

then give him the command to run on each switch.

sh mac-address-table address 3333.3333.3333

Kevin Dorrell Wed, 09/12/2007 - 06:19
User Badges:
  • Green, 3000 points or more

Check the subnet mask and gateway on the two machines in question. If they are configured to use their own address as a gateway then they will ARP for everything, even stuff on the Internet. If the mask is wider than it should be but the gateway is correct, then it will ARP for any address in its mask range.

Kevin Dorrell


MZydorczyk2 Wed, 09/12/2007 - 06:53
User Badges:

Thanks for the tip. However I cant check them because I dont know where they are.


This Discussion