cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
643
Views
0
Helpful
6
Replies

Active-Active firewall and virtual MAC address

ayman emara
Level 1
Level 1

Hi All,

i have Active - Active firewall and want to change the firewall virtual MAC address.!!!

is it possible ?? and if it is ,how can i do it??

Thanks in advance,

Ayman

3 Accepted Solutions

Accepted Solutions

mirober2
Cisco Employee
Cisco Employee

Hi Ayman,

Yes, you can do this with the 'mac address' command. Here is the command reference;

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2026897

Hope that helps.

-Mike

View solution in original post

Hi Ayman,

Yes, you would do it within the failover group. Here is an example from the command reference:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2026897

hostname(config)# failover group 2
hostname(config-fover-group)# secondary
hostname(config-fover-group)# preempt 100
hostname(config-fover-group)# mac address e1 0000.a000.a011 0000.a000.a012
hostname(config-fover-group)# exit

Hope that helps.

-Mike

View solution in original post

Hi Ayman,

Yes, you can do this command for either failover group while you are in (config-fover-group)# mode.

Hope that helps.

-Mike

View solution in original post

6 Replies 6

mirober2
Cisco Employee
Cisco Employee

Hi Ayman,

Yes, you can do this with the 'mac address' command. Here is the command reference;

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2026897

Hope that helps.

-Mike

ayman emara
Level 1
Level 1

HI mike,

the commands are in active- standby mode.

is it applied also in active - actvie mode.

thanks

Ayman

Hi Ayman,

Yes, you would do it within the failover group. Here is an example from the command reference:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2026897

hostname(config)# failover group 2
hostname(config-fover-group)# secondary
hostname(config-fover-group)# preempt 100
hostname(config-fover-group)# mac address e1 0000.a000.a011 0000.a000.a012
hostname(config-fover-group)# exit

Hope that helps.

-Mike

Thanks Mike it really helps

many many thanks

Ayman

Hi mike,

this will change the secondary MAC address only.

can i do this commands for the primary group also.

Regards,

Ayman yehia

Hi Ayman,

Yes, you can do this command for either failover group while you are in (config-fover-group)# mode.

Hope that helps.

-Mike

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: