For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

brucecmc_163171's avatar
brucecmc_163171
Icon for Nimbostratus rankNimbostratus
Aug 08, 2014

mac addresses

alright,

 

i'm a bit confused by the mac address being created per interface based on the vlan.

 

let me give the example: F5 LTM 8900, running 10.2.4 Build 817.0 Hotfix HF7 up stream switch, displays 3 mac's on a trunk from my F5: 0001.d7d1.5e07, 0001.d7d1.5e0d, and 0001.d7d1.5e03 vlan 314, 315 and 330 respectively

 

from the interface perspective within the F5 gui, i see the following mac's: 0:1:d7:d1:5e:7, 0:1:d7:d1:5e:d, and nothing that looks like 0001.d7d1.5e03.

 

My assumption is, I need to sling a zero in places where zeros appear to be missing (ie... 0 0:1d7:d1:5e: 0 7

 

In this example, the corresponding interfaces indicate 1 is DOWN (5e:07) and one is UP (5e:0d).

 

what i'm trying to interpret, is what mac address should I be seeing from the LTM to the switch and then relate that to a physical interface on the LTM.

 

8 Replies

  • You're correct on the zero placements. This article may provide some clarity relating to determining what MAC addresses you may see at the switch level, as layer 2 and 3 traffic will likely have different MAC addresses:

     

    http://support.f5.com/kb/en-us/solutions/public/14000/500/sol14513.html

     

    • brucecmc_163171's avatar
      brucecmc_163171
      Icon for Nimbostratus rankNimbostratus
      thanks cory...yes, I've read that doc...which is what prompted my questions...clear as mud to me...lol...going to read through it again...maybe the light will come on...
    • brucecmc_163171's avatar
      brucecmc_163171
      Icon for Nimbostratus rankNimbostratus
      another odd thing, when I run the show sys mac-address | grep -I interface, it doesn't display the mac of the interface I was referencing above that isn't showing up anywhere (0:1:d7:d1:5e:3). BUT, if I grep just for the mac, it returns 0:1:d7:d1:5e:3 net vlan xxxxx_330 mac-true xxxx being my random naming convention
    • Cory_50405's avatar
      Cory_50405
      Icon for Noctilucent rankNoctilucent
      So the vlan interface will be the source of IP traffic, whereas the physical interface will source things like STP. Sounds like the 03 MAC you're referring to is assigned to your 330 vlan, which should be visible in the GUI.