- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- Re: How to set an Inverted MAC
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to set an Inverted MAC
Can we manually configure what the inverted MAC Address will be in R80.10. Has anyone done this or seen it work for R80.10? Do you have the procedure?
it is the “inverted back source MAC Address” that appears in the switch ARP table
If one was to run a ‘fw ctl zdebug –m cluster + select’ you would see in the logs something like this:
;[cpu_7];[fw4_0];fwha_select_ip_packet: The inverted back source MAC address will be 00:16:63:BF:23:FF;
When one does a lookup of the vendor for MAC Address 00:16:63 is states the vendor of KBT Mobile. Would like to know if there is a way to configure it to use some a different MAC, like 00:1C:7F or 00:90:FB or possibly an older Noxia MAC
This is what the ARP table looked like:
* - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC
age - seconds since last seen,+ - primary entry using vPC Peer-Link
VLAN MAC Address Type age Secure NTFY Ports/SWID.SSID.LID
---------+-----------------+--------+---------+------+----+------------------
* 13 0000.0000.0200 dynamic 0 F F Eth102/1/31
* 13 0016.63bf.23ff dynamic 0 F F Eth102/1/31
* 13 001c.7f62.ed66 dynamic 0 F F Eth102/1/31
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Probably a better question for Appliances and Gaia.
Hopefully one of Alexander Kim's team can provide some commentary.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
In your list, the first MAC belongs to ClusterXL: 0000.0000.0200. This is the source MAC address for CCP frames.
I am not sure about the second one. Did you enable vMAC by any chance?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Answering my own question. No, neither one looks like vMAC. You can find some details here: How to enable ClusterXL Virtual MAC (VMAC) mode
The only logical conclusion is that you do have some third party sending frames to the same switch port.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There's no specific way to control what the inverted MAC will be, but it is based on your original MAC as well as the kernel parameters fwha_mac_magic and the fwha_mac_forward_magic.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for the response!
