Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

ASA 5505 - Static ISP address and Mac address off switch ports

Hi,

I´m having problems in configure my ISP Static address.

After reading I know that ASA 5505 share phisical mac address to all ports off the switch. And in ASDM I access to the interface and in advanced option is possible to configure one mac.

But when I run sh interface ethernet in every port, shows the same mac. But whith the sh interface vlan 1, shows the mac inserted manualy.

Which of the macs should I give to my ISP? The phisical interface or the vlan interface?

If I change the VLAN mac, isn´t that mac that is fixed to the layer 2 datagram?

Kind Regards,

AS

2 REPLIES
Super Bronze

ASA 5505 - Static ISP address and Mac address off switch ports

Hi,

It should me the MAC Address of the Vlan interface.

I tested this once for someone here on the CSC when they were having a problem when they replaced the firewall and lost connectivity because ISP still had the wrong ARP table information (same public IP but different MAC)

I for example confirmed that I could configure the same MAC address that they had to my ASA5505 and see that at our ISP core devices ARP table (I work for the ISP)

- Jouni

Community Member

ASA 5505 - Static ISP address and Mac address off switch ports

Hi Jouni,

But I changed it too in the interface option, but the ping didnt pass. I will talk to their support, maybe thay have extra security methods or sometihng.

Kind Regards,

AS

253
Views
5
Helpful
2
Replies
CreatePlease to create content