OTV MAC address limitation

Has anyone heard of any MAC address limitations with OTV on the Nexus 7000s? I heard from a guy yesterday that they did an OTV POC and ran into issues when the MAC address count got above 500.

Jeremy,
There a current limit of 12K MAC Addresses across all the extended VLANs in all configured overlays.
http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/otv/configuration/guide/Cisco_Nexus_7000_Series_NX-OS_OTV_Configuration_Guide__Release_5.x_appendix1.html
Regards,
Robert

Similar Messages

MAC Address Limitations

What is the issue with MAC Address Limitations on the SUPII?

From: http://www.cisco.com/en/US/partner/products/hw/modules/ps2797/products_data_sheet09186a00800887fd.html
Media Access Control (MAC) addresses-128K

WLC and ISE 1.1.1 guest MAC address limits

Hi,
I am looking at implimenting a wireless hotspot and want to know if ISE 1.1.1 is able to enforce limits on the individual users (ie. Time limit, Data Limit)
These limits need to be erased at the end of the day.
I am using dynamic vlans to seperate out guests from corporate users.
ISE is in a 192.x.x.x address range and the guest vlan sits in a 10.x.x.x vlan.
Im struggeling with ISE terminating the Guest sessions and then not permitting that same user back onto the network.

Yes it can be done using the time profile option in ISE.Please review the below links on how to configure time profiles for guest and sponsor portals.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html
http://www.cisco.com/en/US/docs/security/ise/1.0/sponsor_guide/ise10_sponsor.html

How many MAC-Address entries can an access-list (AIR1200) handle

Hi all
I got a couple of accesspoint AP1231G with a MAC-Filter configured.
Now I'm curios if the access-list has a maximal mac-address limitation.
At the moment there are about 130 MAC-address and couple of clients have sometimes trouble to get connected.
Any hints?
Thanks,
Norbert

I was referring to the autonomous AP database size.
The default size of the database for the controller is different depending on verion.

RSPAN limitations with vtp domain on 6500- 12.2.3(33)SXH5 ERROR DUPLICATED MAC ADDRESS ON TWO VLANS

Hello everyone,
i have a network with a
L3(core) 6500 12.2.3(33)SXH5 with vtp (server) and pruning on, rstp
L2(distribution, ) with 3750 fiber connected
L2(access) with mixed hardware 2950-3750
when i go to setup a rspan:
6500(config)#vlan 400
6500(config-vlan)#remote-span
access(config)#monitor session1 source remote vlan400
access(config)#monitor session1 destination fa2/0/1
access(config)#monitor session1 source int gi1/0/37, gi1/0/44, tx
access(config)#monitor session1 destination remote vlan 400
my problem is on a periferic access switches 2950 not redundant:
i relevated a
duplicate mac-address table, i found a every mac on 2 vlan, the 200 and 400(of remote span) with related problem of loss of packets and random connection problem
My question is:
is compatibile the rspan with 6500 vtp, how i can fixed this problems?
thank you

Other users from the forums with a similar problem came to a conflict occurring here
Oct 18 11:52:41 MacBook-Pro opendirectoryd[123]: 2595.39 - ODNodeCreateWithNameAndOptions failed with error 'Unknown node name' (2000)
They say it's some sort of conflict with the language of the installation or is it language keyboard input, then what is meant and how it can be solved I do not understand if this is certainly so.
(sorry for my bad english)

How do you add a MAC address to air port so it will recognize a Nest thermostat

How do you add a MAC address to anAir Port

In a v5 utility it looks different to a v6 utility.. and you should not be using MAC restrictions anyway, unless you have time controls. MAC filtering is not adequate security.
There are only two options Timed Access or Radius.. you cannot use Radius without a Radius authentication server.
Clcik the + symbol and add the MAC address.
Make sure the time limits are not restricted if you want permanent access.
BUT this is just the wrong way to do things. Use proper security WPA or WPA2 with a password. not MAC filters which are next to useless.
If you have issues getting your NEST to connect to the Airport, set the wireless name to correct SMB standard. That means short, no spaces and pure alphanumeric. The current name is probably not compliant to SMB network standards hence the NEST cannot connect.

Windows 7-8.1 Can not change the MAC Address on wifi and cannot load login page in public HotSpot.

Windows 7-8.1 Can not change the MAC Address on wifi and cannot load login page in public HotSpot.
Adapter: Ralink RT3070 Chipset wifi adapter
Tested: os Windows 8.1 Professional
Hot Spot: 802.11b
The first problem windows 7-8.1 got IP adress and connect he public HotSpot but cannot load login page or any other page. It does not work with it.
The second problem Wifi canrd/configure/Advandes (No network adress change function).Tested with the default windows driver and the ralink rt 3070 driver the same problem.On windows XP the same function the same driver works perfectly.
multiple users to have expressed interest in the problem But Microsoft not corrected the problem window7-8.1 10?
lizardsystems.com/wiki/change_mac_address/faq/change_mac_address_in_windows_7
blog.technitium.com/2011/05/tmac-issue-with-wireless-network.html
superuser.com/questions/519189/how-to-change-the-mac-address-in-win-8-to-spoof-a-roku-player-through-a-wifi-spl
social.technet.microsoft.com/Forums/windows/en-US/59e07df3-471c-499e-ad5f-e7cb507595df/cannot-change-mac-address-in-windows-7-driver-has-option-doesnt-work-neither-does-regedit-ms?forum=w7itpronetworking
networksteve.com/windows/topic.php/CANNOT_CHANGE_WIRELESS_%28SPOOF%29_MAC_ADDRESS_ON_WINDOWS_7/?TopicId=16810&Posts=1
On windows XP or linux have a MAC adress Change function allow 00 mac adress and another normal mac adress range.On windows 8.1 all Mac changer program dont work.This 2,6,A,E on second adress are not vaild Mac adress. You simply can not use normal MAC
addresses on windows 8.1.When i connect the usb the Pc windows 8.1 recognizes the adapter but the default driver and the downloaded ralink driver the same problem.On windows xp the current driver works perfectly have (Local Mac Network Adress) funktion
and works with the 802.11b hot spot.I got the internet my PC and laptop too public HotSpots and another wifi HotSpots if wont work correctly i can not use neither the windows 7,8,8.1 or 10. Many users have expressed interest in the problem more forums.
The 3. problem im tested in virtualbox the windows 7 and 8.1 on 8.1 (on the blue wifi platform) not show correctly the signal strengh. On windows 7 show this correctly.The windows 7-8.1 Configure/advanced the advanced options on Ralink 3070 the default (windows
driver) somehow downgraded function is less than for Xp. Configure/advanced the advanced options (needs to be upgraded in the future) because it does not advance but rather regressed.
Today it is very common these wi-fi technology increasingly used (hotels,Public Hots Spots,Internet coffe,) growing free bublic wifi projects. The wifi funktions on windows need debugging and modernize.The quality of Wi-Fi is now the operating system
is now a thing order which is not good then the operating system is unusable.

Hi,
For changing the MAC address for Windows 7 is designed with some limitation, we cannot get over it. Thanks for your understanding.
Under Windows 7, the possible range of spoofed addresses for wireless adapters that can be set is limited. To be used by Windows 7, a spoofed MAC address should have 0 as a least significant bit (unicast) and 1 as a second least significant
bit (locally administered) in the second nibble. Thus possible values for the second nibble are limited to 2, 6, A and E.
In other words
MAC address: “XY-XX-XX-XX-XX-XX” “X” can be anything hexadecimal. The hexadecimal “Y”, written in binary format, is Y: “kmnp”, where “p” is the least significant bit;
p=0 --> unicast;
p=1 --> multicast;
n=0 --> globally assigned MAC;
n=1 --> locally administered;
So, actually MAC can be changed to any combination in which p=0 and n=1;
“Y” can be 2, 6, A or E.
So the possible MAC addresses in Windows 7 for wireless adapters:
X2-XX-XX-XX-XX-XX
X6-XX-XX-XX-XX-XX
XA-XX-XX-XX-XX-XX
XE-XX-XX-XX-XX-XX
For the wifi hotspot issue, please check this blog to see if it can be helpful.
Windows 7 Connectivity Problems in Public Hotspots
http://blogs.technet.com/b/patrickr/archive/2010/07/28/windows-7-connectivity-problems-in-public-hotspots.aspx
Kate Li
TechNet Community Support

Remote access via pppoe - mac add limitation

Hi,
We have a requirement to provide remote access for a number of individual customers. I plan on using pppoe for each of these customers as it will give us the ability to control each session individually and apply shaping etc if required.
There will be about 250 customers at the one location and we are using a thrid party supplier to run the connectivity into the site. I plan on dragging the pppoe sessions back to our network rather than terminating them onsite.
The main issue I have is that the supplier who is running the connectivity into the site for us has a mac address limit of 50.
My question is - is there any way in which I can still bring the pppoe session back to our network while still remaining under the 50 mac address limit?
I thought perhaps mpls might be the way to go here, but, I'm not too sure. We're running mosly Cisco 7200's so we might be limited in the options available...
Can any please advise on what might be a suitable option?
Thanks,
Jonathan

I don't think PPPoE is a good idea. It introduces a lot of additional requirements, devices, additional client configuration, all complications that are easily avoided with a normal technology, eg. IP routing, GRE (only if necessary), etc.

HWIC-4ESW having same MAC address with fa0/0 from CISCO2811 router.

Hi Expert, I Have a situation where a 2811 is configured with 2 VLANs from HWIC-4ESW module, different ports configured, however the VLAN interfaces have the same mac-address with fa0/0 which causes ARP poisoning problem. It that anyway to solve this problem?

Hi Lee,
My understanding is, this is expected behavior and is due to the hardware limitation of the HWIC-4ESW Module. And I think the HWIC-4ESW Module (at least from my lab testing) always takes the MAC Address of the first on board LAN Interface.
Also, I am able to change the MAC Address of the first on board LAN Interface (Ex.Gig0/0) but I cannot change the MAC Address of the VLAN SVI.
I hope it helps.
Regards,
Arul
** Please rate all helpful posts **

ISP blocks my APBS due to various MAC addresses used by the router

Hi all,
My Internet provider limits access to Internet over Ethernet cable
for fixed MAC address(s). That means, I have to inform ISP of the
only MAC address I'll use to transfer data. In the case ISP detects
traffic with other MAC addresses on my cable, he blocks any traffic
at all (until cable unplugged and kind of 30secs are waited).
My configuration is APBS GigaN with "shared public IP" and with
MacBookPro connected over embedded WiFi AirPort N card.
I reported EthernetID of my APBS to ISP, but stuck into the problem
that all the time router is blocked. It successfully receives
IP settings from DHCP of provider, and then passes nothing in/out.
The provider said he can see the packets with different MAC addresses,
as I understood these MACs are exactly AirportID and EthernetID of
APBS. Why is it happening so, when "shared public IP" with DHCP
and NAT are selected? Why MAC address of wireless card of APBS is
visible to outside? What can I do with it, supposing that provider
can't fix the case on his side?
Regards,
Strim

kevj is right, Your linksys router has 3 MAC address and they all are assocciated with each other.

How to Implementing ise 1.2 authentication user name against mac address

Hi all,
My organization wants to authenticate medical devices with certificate.
What I'm trying to do is on the certificate the name of the user will be his mac address,
And the ise policy will be if the user name equal to mac address than he authenticate.
Until now I didn’t succeed.
Is it possible?
Lee.

It sounds like you are trying to do two different things.
The certificate can be done through 802.1x using peap I dont know if your devices can handle dot1x so if not they can use MAB. Far less secure but if its a low level device like a printer that has limited input capability then you are stuck with MAB.
What you could do with MAB is use the OUI and some other identifying information (if available) like device host names (This can be derived from DHCP i believe) and possibly av pairs (RADIUS) to help profile the devices. These can be put into a custom endpoint profile that is given a specific authorization rule.
The whole point is to try to isolate certain types of equipment so that only they get the custom authz rule
Does this make sense? Im shooting a little blind here without more info.

AP 2700 - 2 MAC addresses - problem with joining to the WLC

Hi,
I had a problem with joining my new AP 2700 to the controller. I've found workaround but I would like to ask you if you know if this behavior is a some kind of bug or maybe feature :)
I have DHCP server which assigns IP address base on the binding MAC address with the IP address. Without binding, IP won't be assigned so I added MAC address from the AP sticker (MAC and SN number is on the sticker at the back of each AP) to the DHCP, connected AP to the switch port which was configured exactly the same way like other ports on this switch where older AP are working fine and.... nothing. IP address was not assigned. There was no DHCP request in the DHCP server logs.
During the investigation I've found that AP present 2 MAC addresses on the switch interface:
switch#sh mac address-table interface fa1/1
Mac Address Table
Vlan Mac Address Type Ports
11 58f3.54c1.2cb3 DYNAMIC Fa1/1
11 58f3.54c1.2cb4 DYNAMIC Fa1/1
The first one (58f3.54c1.2cb3) is a "sticker" MAC address but the second one (58f3.54c1.2cb4) is something new. Looking in to the DHCP logs I've found log that this second MAC address (58f3.54c1.2cb4) tried to get IP address but it was not possible because this MAC was not binding with any IP address so DHCP server refuse. I added this second MAC (58f3.54c1.2cb4) to the DHCP server, AP get IP address, join to the WLC, download software, reboot and ... this MAC address disappear.
switch#sh mac address-table interface fa1/1
Mac Address Table
Vlan Mac Address Type Ports
11 58f3.54c1.2cb3 DYNAMIC Fa1/1
Software I had on the AP before joining to the WLC was:
Version :
Cisco IOS Software, C2700 Software (AP3G2-RCVK9W8-M), Version 15.2(4)JB5, RELEASE SOFTWARE (fc1)
now I have (after downloaded from the WLC)
Version :
Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
Do anyone know what happen?

(WLC1) >show sysinfo
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.6.130.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.95.16
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS
System Name...................................... WLC1
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
Redundancy Mode.................................. Disabled
IP Address....................................... 10.10.10.10
Last Reset....................................... Software reset
System Up Time................................... 25 days 2 hrs 53 mins 5 secs
System Timezone Location.........................
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180
Configured Country............................... US - United States
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +44 C
External Temperature............................. +22 C
Fan Status....................................... OK
State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Disabled
Number of WLANs.................................. 6
Number of Active Clients......................... 25
Burned-in MAC Address............................ XX:XX:XX:XX:XX:XX
Power Supply 1................................... Present, OK
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 25
(WLC1) >show time
Time............................................. Thu Apr 9 13:51:00 2015
Timezone delta................................... 0:0
Timezone location................................
NTP Servers
NTP Polling Interval......................... 3600
Index NTP Key Index NTP Server NTP Msg Auth Status
1 0 10.10.10.11 AUTH DISABLED
It's look like AP doesn't allow for console login or commands it just only show activity. After rebooting the WLC I get information:
Cisco IOS Software, C2700 Software (AP3G2-RCVK9W8-M), Version 15.2(4)JB5, RELEASE SOFTWARE (fc1)

Tcl script to change access vlan based on MAC address

Hello all. I'm looking for some input on how best to handle this situation. I have a large nework with a lot of remote offices where we have limited control over users moving around patch cables. We're using vlan-based QoS in these office to mark voice, video, data. etc. The problem I'm having is that our users are moving video conferencing equipment to different interfaces on our swithes, which puts the VTC unit in a different vlan, fouling our QoS policy. They then call and complain about poor video quality.
I'm trying to come up with a way to automate putting the interface in the video vlan if a VTC unit is connected. All of our video conferencing units are from the same vendor, so they have same OUI in the MAC address. The script I've been working on looks for a line protocol up event, then checks to see what access vlan is configured on the interface. If the interface is already in the video vlan, the script exits. if the interface is not in the video vlan, the script looks at the MAC address table for the interface and if the OUI matches a VTC unit, the script changes interface configuration. My question is, is there a better event to trigger script execution? Maybe a MAC notification trap, or something else? Line protocol transitions when the access vlan is changed, so the current script runs twice: once when the interface first comes up with a new connection, and again when the vlan is changed.
Script is attached. Any help or advice is appreciated!

Does your video equipment use CDP? If so, then you can use the neighbor-discovery event detector to only react when you see a media endpoint being connected to a port. Yes, MAC address notifications (the mat ED) can also work if you know the MACs of your media endpoints.

MAC address change under MacBook Pro MB133PL/A (Penryn) with Mac OSX 10.5.2

Hi,
Do you know how to change MAC address of ethernet LAN card (not Wi-Fi) under MacBook Pro MB133PL/A (Penryn) with Mac OSX 10.5.2 (Leopard) ?
Thanks,

I use the terminal.
sudo ifconfig en0 lladdr /enter valid mac address here without the slashes/
press return
enter superuser password
press return
This will change the regular wired ethernet port on you MBP. To change the wireless MAC you should replace the en0 with an en1 but if you have a Airport v1.0 card then it will not work. It might work if you have a v2.0 but people seem to have off an on success with that. Also you can attempt putting ether in place of lladdr if you still have issues that need troubleshooting.
I know there are some legit reasons to change the MAC address and many non-legit ones but lets just say for instance a friend of yours has a network or wireless and they forgot their password to control the settings on that network. Long ago when they made the network they limited access to it by binding it to certain MAC addresses namely theirs. Now they have given you permission to use the network but you can't because your computer does not have their mac address. They cannot make the network give you permission because they forgot their password so they give you thier MAC address and let you trick their network into thinking your computer is actually your friend's and then you are able to surf the internet. They won't just let you use their computer cause they need to write an essay offline for a few hours. This does not violate any terms of service, you got permission and unless there are some other extenuating circumstances this is a legit move. I assume this is the exact reason you want this information.

Where can I find the Mac address on somewhere other than my iPod touch? Like the box?

Where can I find the Mac Address for my iPod Touch? Is it on the box somewhere? I lost my iPod a while ago, but I was told that if I had the Mac Adress, I would be able to retrace it. Help!

You were told incorrectly. Knowing the MAC address will not help you track your iPod. The only way to track your iPod (and then only under limited specific conditions) is to have turned on Find My iPhone on the iPod before it was lost.

OTV MAC address limitation

Similar Messages

Maybe you are looking for