Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Active-Active firewall and virtual MAC address

Hi All,

i have Active - Active firewall and want to change the firewall virtual MAC address.!!!

is it possible ?? and if it is ,how can i do it??

Thanks in advance,

Ayman

3 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

Re: Active-Active firewall and virtual MAC address

Hi Ayman,

Yes, you can do this with the 'mac address' command. Here is the command reference;

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2026897

Hope that helps.

-Mike

Cisco Employee

Re: Active-Active firewall and virtual MAC address

Hi Ayman,

Yes, you would do it within the failover group. Here is an example from the command reference:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2026897

hostname(config)# failover group 2
hostname(config-fover-group)# secondary
hostname(config-fover-group)# preempt 100
hostname(config-fover-group)# mac address e1 0000.a000.a011 0000.a000.a012
hostname(config-fover-group)# exit

Hope that helps.

-Mike

Cisco Employee

Re: Active-Active firewall and virtual MAC address

Hi Ayman,

Yes, you can do this command for either failover group while you are in (config-fover-group)# mode.

Hope that helps.

-Mike

6 REPLIES
Cisco Employee

Re: Active-Active firewall and virtual MAC address

Hi Ayman,

Yes, you can do this with the 'mac address' command. Here is the command reference;

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2026897

Hope that helps.

-Mike

New Member

Re: Active-Active firewall and virtual MAC address

HI mike,

the commands are in active- standby mode.

is it applied also in active - actvie mode.

thanks

Ayman

Cisco Employee

Re: Active-Active firewall and virtual MAC address

Hi Ayman,

Yes, you would do it within the failover group. Here is an example from the command reference:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2026897

hostname(config)# failover group 2
hostname(config-fover-group)# secondary
hostname(config-fover-group)# preempt 100
hostname(config-fover-group)# mac address e1 0000.a000.a011 0000.a000.a012
hostname(config-fover-group)# exit

Hope that helps.

-Mike

New Member

Re: Active-Active firewall and virtual MAC address

Thanks Mike it really helps

many many thanks

Ayman

New Member

Re: Active-Active firewall and virtual MAC address

Hi mike,

this will change the secondary MAC address only.

can i do this commands for the primary group also.

Regards,

Ayman yehia

Cisco Employee

Re: Active-Active firewall and virtual MAC address

Hi Ayman,

Yes, you can do this command for either failover group while you are in (config-fover-group)# mode.

Hope that helps.

-Mike

290
Views
0
Helpful
6
Replies