For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jachbr214's avatar
jachbr214
Icon for Nimbostratus rankNimbostratus
May 19, 2008

Display mac address of connected server

Is there a quick way to find out the mac address of the connected server on each port. arp -a only shows the vlan that it is on. I would like to find the actual interface. Example what is the mac address of the server plugged into 1.2 on the LTM.

 

 

Thank you

2 Replies

  • mkahler_108475's avatar
    mkahler_108475
    Historic F5 Account
    I am not quite sure what you are asking. If you are looking for the MAC address associated with an interface on the BIG-IP, the bigpipe command:

     

     

    bigpipe interface show all

     

     

    If you are looking for MAC addresses connected downstream from the BIG-IP, I don't think there is a command to handle this.

     

     

    bigpipe arp show

     

     

    Will give you devices in the arp table but this is on a VLAN level. You could tcpdump on the interface and then use a program like wireshark to view the MAC addresses, but this may be tedious. Here is an example:

     

     

    tcpdump -ni 1.1 -w /var/tmp/interface1_1.pcap

     

     

    Please be aware the tcpdump can use resources and unfiltered captures can grow quite large. If you are only looking for MAC address, I would suggest running tcpdump on a standby BIG-IP.

     

     

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    You could also check the output from 'b conn all show all' to get a list of the connection table entries and the respective MAC addresses. arp -a will show the arp cache and the VLAN it was learned on. As mkahler pointed out, both of these options show the VLAN, not the physical port.

     

     

    Aaron