Switch learning mac addresses

In a video that I watched a few days ago someone explained a basic process of booting up a switch and how a switch learns mac addresses. He said something that I would like to discuss. I know... it is not important but want to clarify :)
PC1---SW1----PC2
PC1 wants to send sth to PC2. In the video it was said:
'a frame arrives at SW1 and SW1 learns the mac address of pc1 but it does not know the mac address of pc2 so it will flood this frame to all ports'
My uderstanding is that it all starts with an arp message: pc1 does not know the mac address and sends an arp and it will allow the switch to learn both mac addresses: pc1 and pc2. I am too lazy to do it in wireshark but did that in PT and that's what I saw as well. After the arp - switch learnt both macs and did not flood the frame.
Am I correct? I know it is not important but... ;-)

It may be possible that there was some aspect of the switch environment in the video that would change the behavior (perhaps something like a long timer for the ARP cache in the PC and a short MAC ageing timer on the switch). But in general you are correct. PC1 would send an ARP request as a broadcast, the switch would learn the MAC of PC1 and forward the ARP request. When PC2 sends its response to the ARP request the switch would learn the MAC of PC2 and forward the ARP response. So the switch should have both MAC addresses when data traffic begins to flow.
HTH
Rick

Similar Messages

  • Fails to learn mac address on Fiber interface with ISP

    Hi,
    We have a problem to bring a new 3750 switch interface up with the ISP.
    Current interface configuration on the router 7500 with SC/Single mode 1000 Base LX is
    interface GigabitEthernet4/0/0
    description ###### ISP #######
    ip address 1.1.1.2 255.255.255.252
    no ip redirects
    no ip unreachables
    load-interval 30
    no negotiation auto
    no cdp enable
    end
    works perfectly fine.
    we are trying to move this link to a Cisco 3750G on SFP single mode 1000 baase LX with the same configuration as below
    interface GigabitEthernet1/0/51
    no switchport
    ip address 1.1.1.2 255.255.255.252
    load-interval 30
    no ip redirects
    no ip unreachables
    no cdp enable
    speed nonegotiate
    we dont get any errors on the link but it fails to learn the mac address from the isp.
    checked the following.
    1. tried changing the SFP and the fiber.
    2. checked internally connecting back to back with another cisco device - works fine .
    3. checked with the isp for any static arp on their side and it is a no.
    I am wondering why it fails to learn the mac-address when it can self ping its own ip address and also the layer stays up with no errors on both the sides.
    Thanks

    Doesn't feel like a fiber/optical issue but a configuration mismatch on one of the end devices.

  • SNMP How to get number of learned MAC addresses on Switch interface

    There is nice c2900PortNumberOfLearnedAddresses table in C2900-MIB, but it's outdated and not supported by modern switches.
    Is there similar table for modern switches? Most interested in Catalyst 2960 and 3750.
    Fetching whole forwarding table is not a good idea.

    Following guide should help you with this:
    http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a0080094a9b.shtml
    http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a00801c9199.shtml
    -Thanks

  • 5548 switch dropping mac addresses

    A few days ago we lost a 5548 switch in our data center. All interfaces that were supposed to be up showed up/up. The management IP address was pingable, could telnet to the box, no indications of resource problems with the switch itself. All SNMP metrics normal. First indication of a problem was that 2 hosts on the same subnet could not ping each other. Entries for those hosts were not in the ARP table. When entries were put in, hosts were able to ping. Saw no indications of local routing. Wireshark revealed no broadcasts present. Within a few hours, situation degenerated to the point that no servers on this switch were operational. All had connectivity issues. Logs, as far as I am able to discern, have no indications of serious or fundamental problems. This switch serves as a server access switch. Upstream is a 6509 acting as a server distribution switch. No indications of trouble there as well. Is there a possibility of problems on this trunk between these 2 platforms? Ready to replace the switch but concerned that this issue could happen again, as there were no error indications on our monitors for the 5548, or 6509. Any insight would be appreciated. Thanks.

    Can you post the config, please?

  • Cisco CSR 1000V - BDI learning mac address

    Hello all,
    about BDI, I know it is not supported through OTV. DDTS CSCuj59314 has been logged to track support of BDI over OTV. Anyone know if this problem is resolved?
    Thanks in advance
    Roberto Loiudice

    Hello,
    no one else has encountered the same problem?
    In general, someone has managed to run correctly csr1000v as SSL VPN terminator on Amazon environment ?
    Any example / network schema / suggestion?
    Thanks in advance for any replies.
    Paolo

  • MAC address learning

    On various switches I have devices connected to, some of the ports never seem to learn the mac-address of the connected device. Anyone have an explanation or fix for why this randomly happens?

    Hi Friend,
    The switch will not learn a mac address till the time device connected to it send some request out from its source mac address.
    Like a workstation if you connect to it and your pc is in hut state the switch will not learn a mac address.
    Incase you power your pc up it will sned a broadcats ofr arp entry and that time switch will learn a mac address because now pc has send some request with its mac address.
    So just check which all devices connected to the switch for which it does not learn mac address are those devices active and up in the network.
    HTH, if yes please rate the post.
    Ankur

  • How to verify VPLS mac-address forwarding

    I think VPLS know how to forward by mac-address. but how to verify it ?
    for example I show mac-address vlan 100. But I can not find a command to verify How mac-address is forwarding ?
    at 6509:
    PA_C76_1>sh mpls l2transport vc
    Local intf Local circuit Dest address VC ID Status
    VFI PA-LA-test VFI 203.160.227.88 100 UP
    VFI PA-LA-test VFI 203.160.227.95 100 UP
    PA_C76_1>show mac-address-table vlan 100
    Legend: * - primary entry
    age - seconds since last seen
    n/a - not available
    vlan mac address type learn age ports
    ------+----------------+--------+-----+----------+--------------------------
    * 100 000b.45b6.bc40 dynamic Yes 95 Router
    * 100 0012.d946.59c1 dynamic Yes 10 Gi4/1

    Hi,
    VPLS provides the medium to for a E-LAN, and in Cisco implementations, the MAC learning is not actually done by a VPLS instance.
    This can be best explained by an example.
    PE(SW)-A ---- PE(SW)-B
    PE(SW)-C
    Now these three PE nodes under VPLS, are only provided the medium to connect to each other using P2P PW forming a full mesh.
    For simplicity you can assume they are three switches connected in the above manner using copper. So this copper connecitivity is provided by VPLS.
    And at the end of the day the end nodes learn mac addresses using the conventional method of flooding and learning. So you wont find any VPLS specific commands to see what mac address is the VPLS instance flooding. As its only providing a medium for connectivty. And the flooding is done by the end nodes. as they treat the VPLS VC as one of the outgoing port.
    HTH-Cheers,
    Swaroop

  • Static MAC address without configuration

    Hello,
    i am a german guy, so please excuse my bad english.
    I have a question about static MAC addresses on a WS-C3750G-48TS Switch.
    I have no static adresses configured on my switch, but see some when execute the "show mac address-table static" command. And i mean not the 0000.0c07.ac01 addresse for HSRP, Spanning-tree or something else, which are forwarded to the CPU, i mean entries like this:
    Switch#show MAC address-table interface g2/0/47
              Mac Address Table
    Vlan    Mac Address       Type        Ports
       3    1212.1212.1212    STATIC      Gi2/0/47
       3    1414.1414.1414    STATIC      Gi2/0/47
    Total Mac Addresses for this criterion: 2
    This entries not configured or dynamicly learned.
    I suspected functions like gratitious-arp, but this is only for IP<->MAC translation. Then i have searched functions like gratitious-mac or mac-notification. I have searched for a function with tells the switchport: "Hey, that is my MAC address. There is no need to learn this address dynamicly", but with no luck.
    Does anybody can tell me, why these MAC addresses are shown static, and not dynamicly?
    Thanks for help.
    Thomas

    Hi Thomas,
    Are there any port-security related configurations in interface Gi2/0/47? Could you post the running-configuration of this interface in concern, output of show mac-address-table interface Gi2/0/47 and also could you let me know what is connected to this interface?
    Thanks,
    Arun

  • EEM for learned MAC

                       Hi there,
    Is there any easy way to create an EEM script so if one any switch interface learned MAC address reached to 4 then it will send an email as alert.
    Any idea? i am trying to work out but cant find any basic EER script any where.
    Thanks

    See this thread:
    https://supportforums.cisco.com/thread/2169067?tstart=0
    The script there looks at the DHCP pool, but it could be easily modified to look at "show mac address-table" for each port instead.  For each port, if the number of lines in the output exceeds your threshold, send an email for that port.

  • Duplicate MAC Addresses effect

    Hi All,
    I have a query regarding the entry of duplicate MAC entries in switch. I tried issuing the following command:-
    Switch(config)#mac address-table static 0007.e9f6.4fd2 vlan 1 interface fa0/2
    Switch(config)#mac address-table static 0007.e9f6.4fd2 vlan 1 interface fa0/3
    And after issuing the command, the resultant MAC table was as follows:-
    1 0007.e9f6.4fd1 STATIC Fa0/2 Fa0/3
    What does this signify. Where would a packet destined to this MAC address reach (I mean the port that it will reach)
    Does it mean that there could be Network Load Balancing?
    Thanks,
    Sridhar.

    HI
    It will reach to the port where the end system is connected.u just deifined the mac-address as static on two ports u will not connect the end system to two ports so on the port which u r end system will connected will be up/up and on the port which the end system is not connected it will be in down state.hope i am correct in this if not plz correct me.
    Thanks
    Mahmood

  • AP 2700 - 2 MAC addresses - problem with joining to the WLC

    Hi,
    I had a problem with joining my new AP 2700 to the controller. I've found workaround but I would like to ask you if you know if this behavior is a some kind of bug or maybe feature :)
    I have DHCP server which assigns IP address base on the binding MAC address with the IP address. Without binding, IP won't be assigned so I added MAC address from the AP sticker (MAC and SN number is on the sticker at the back of each AP) to the DHCP, connected AP to the switch port which was configured exactly the same way like other ports on this switch where older AP are working fine and.... nothing. IP address was not assigned. There was no DHCP request in the DHCP server logs.
    During the investigation I've found that AP present 2 MAC addresses on the switch interface:
    switch#sh mac address-table interface fa1/1
    Mac Address Table
    Vlan Mac Address Type Ports
    11 58f3.54c1.2cb3 DYNAMIC Fa1/1
    11 58f3.54c1.2cb4 DYNAMIC Fa1/1
    The first one (58f3.54c1.2cb3) is a "sticker" MAC address but the second one (58f3.54c1.2cb4) is something new. Looking in to the DHCP logs I've found log that this second MAC address (58f3.54c1.2cb4) tried to get IP address but it was not possible because this MAC was not binding with any IP address so DHCP server refuse. I added this second MAC (58f3.54c1.2cb4) to the DHCP server, AP get IP address, join to the WLC, download software, reboot and ... this MAC address disappear.
    switch#sh mac address-table interface fa1/1
    Mac Address Table
    Vlan Mac Address Type Ports
    11 58f3.54c1.2cb3 DYNAMIC Fa1/1
    Software I had on the AP before joining to the WLC was:
    Version :
    Cisco IOS Software, C2700 Software (AP3G2-RCVK9W8-M), Version 15.2(4)JB5, RELEASE SOFTWARE (fc1)
    now I have (after downloaded from the WLC)
    Version :
    Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
    Do anyone know what happen?

    (WLC1) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.6.130.0
    Bootloader Version............................... 1.0.20
    Field Recovery Image Version..................... 7.6.95.16
    Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
    Build Type....................................... DATA + WPS
    System Name...................................... WLC1
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
    Redundancy Mode.................................. Disabled
    IP Address....................................... 10.10.10.10
    Last Reset....................................... Software reset
    System Up Time................................... 25 days 2 hrs 53 mins 5 secs
    System Timezone Location.........................
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    Configured Country............................... US - United States
    Operating Environment............................ Commercial (0 to 40 C)
    Internal Temp Alarm Limits....................... 0 to 65 C
    Internal Temperature............................. +44 C
    External Temperature............................. +22 C
    Fan Status....................................... OK
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Disabled
    Number of WLANs.................................. 6
    Number of Active Clients......................... 25
    Burned-in MAC Address............................ XX:XX:XX:XX:XX:XX
    Power Supply 1................................... Present, OK
    Power Supply 2................................... Present, OK
    Maximum number of APs supported.................. 25
    (WLC1) >show time
    Time............................................. Thu Apr 9 13:51:00 2015
    Timezone delta................................... 0:0
    Timezone location................................
    NTP Servers
    NTP Polling Interval......................... 3600
    Index NTP Key Index NTP Server NTP Msg Auth Status
    1 0 10.10.10.11 AUTH DISABLED
    It's look like AP doesn't allow for console login or commands it just only show activity. After rebooting the WLC I get information:
    Cisco IOS Software, C2700 Software (AP3G2-RCVK9W8-M), Version 15.2(4)JB5, RELEASE SOFTWARE (fc1)

  • Tools to find a mac address on a port in my network

    I would like to find a tool to help me to easily locate a mac address on the network.
    At the moment I use the following comands :
    On the central switch : sh mac-address-table
    then sh cdp neighbors to locate the witch on with the mac address is connected
    and sh mac-address-table again .

    Hi
    With Ciscoworks Campus Manager you can easily find any MAC connected to your network. But you need to buy the LMS suite, and it's not for free :-)
    An other way is to use a Layer 2 trace, but all devices in between have to support that feature, don't ask me which platforms/software releases, do it or not.
    Simon

  • 3850 stack member has no mac address.

    I have a strange issue where a member in my 3850 stack has no mac address.  This occurred after at duplicate address was discovered on the management interface.  We have reboot the switch but no luck. still the same. see below:
    BTRBRGBB1535A_Stack1#sho sw de
    Switch/Stack Mac Address : 5ca4.8a0c.2d80 - Local Mac Address
    Mac persistency wait time: Indefinite
                                                 H/W   Current
    Switch#   Role    Mac Address     Priority Version  State
    *1       Active   5ca4.8a0c.2d80     1      V02     Ready
     2       Member   0000.0000.0000     0      0       Provisioned
             Stack Port Status             Neighbors
    Switch#  Port 1     Port 2           Port 1   Port 2
      1       DOWN       DOWN             None     None
    Any help would be appriciated.

    2 Member 0000.0000.0000 0 0 Provisioned
    It's not "strange".  It's a normal behaviour because the 2nd stack member hasn't joined the stack yet.  It could be the that the 2nd stack member isn't powered up or it's not cabled properly.

  • Switch mac address learning

    Hi all, am i right in saying that if I had 2 switches plugged together, each switch wouldnt know about each others mac addresses until a host is passed through the uplink, can anyone tell me how the switch knows to use the uplink to find the yet un found mac address, does the switch forward the broadcast from the pc, then its learnt ?

    You are right - they do not communicate their MAC tables to each other. The time a switch learns about a device connected to another switch is when a packet hits *that* switch.
    Normally a broadcast will be carried across all switches in the VLAN, so when a PC arps, all switches will hear about it and add it to their tables. If after (by default) 5 mins, no traffic from said device hits the switch, it wll be removed from te table (cam aging).
    So, with a simple network of two switches and everything in VLAN1, and three systems - A, B and C. A wants to talk to B. A&B are in switch 1, C in switch 2.
    It sends a broadcast (ARP) which gets flooded to B, and via switch 2 and this seen by B. Switch 1 adds A to the address table, as does switch 2 - pointing at the inter switch link.
    B unicasts the ARP response to A. Switch 1 adds B to the table and forwards the response to A as A is in the table. This does not get sent to switch 2. A&B talk to each other and the traffic is constrained to switch 1. After 5 mins the entry for A in switch two ages out and is removed.
    A then starts to purely stream data to B. B does not bneed to respond. A stays in the table, but after 5 mins, B ages out. At that point, the traffic will be sent to switch 2, and seen by C as no switch knows where B is.
    Because of whatever imaginary application is sending all this data, C sends a "quench" message to A. This gets flooded everywhere. the address of C is added to tables. A Acknowledges and responds, but carries on sending the traffic. As B is not in the table, the traffic is still flooded, but my totally imaginary application does somethin useful. It triggers a packet that gets a response from B. That puts B back in the filter table of switch1, and stops the traffic being flooded. If B sends anything o B, it will be flooded on switch 2, including to 1, but on 1 it will be sent only to B. any response to C will then put B in both tables.

  • Multicast mac address isn't learned, igmp-snooping

    I have PIM router which connects to the cat 2960 switch and also I have host which connects to another port on the same switch. Host was joined to the IGMP group 224.1.1.1. I see that the router generates igmp-query and the host respons. IGMP-snooping process sees that process and updates appropriate entries:
    2960-5#sh ip igmp snooping mrouter
    Vlan    ports
      15    Gi2/0/32(dynamic)
    2960-5#sh ip igmp snooping groups
    15        224.1.1.1                igmp        v2          Gi2/0/32, Gi2/0/33
    But when I command "sh mac address-table multicast" I see nothing:
    2960#sh mac address-table multicast
    Vlan    Mac Address       Type        Ports
    What is reason of this problem?

    There is the following statement from the "CCNP Practical Studies: Switching:
    the process of populating the bridge table with multicast MAC addresses is based upon inspection of the destination MAC address, unlike unicast MAC addresses where the source MAC address of unicast frames is examined to generate bridge table entries.
    And this book describes other parts of the mac learning process and says that after exchanging IGMP-message MAC-table must be populated by multicast mac-addresses. But later I found some Cisco and Jupiner documentation which says there is two way to perform multicast forwarding - MAC and IP. Default metod is IP multicast forwarding. When this metod is used multicast MAC-addresses isn't learnt and process of packet forwarding uses special forwarding cache which includes list of mapping IP and appropriate interfaces. It all means that this book isn't actual. All modern switchs perform multicast forwarding by IP metod and MAC-addresses don't populate CAM. 

Maybe you are looking for

  • How to delete a request in a collapsed and aggregated infocube ???

    Hi all, <u><b>The situation :</b></u> I have a cube that is collapsed, and that has aggregates. I'm not the one that designed this cube but if my understanding is good, aggregates were created to avoid the duplication of the recordings for the same k

  • Time Machine Freezing in 10.6.1

    Hi: I've installed 10.6 and upgraded to 10.6.1. I found that Time Machine would no longer backup, instead freezing after backing up a few MB of my 92.42 GB material. I went through a series of trouble shooting steps, including trying to repair the sp

  • 2 iphones and ipad 2 to sync

    I currently have 2 iphones and now an iPad 2 to add to my itunes account. I wanted to pull info from iPhone 2 to the iPad and it looks like it pulled all info from BOTH iPhone A and iPhone B to the iPad 2. How do I manage iPhone A, iPhone B and iPad

  • Standard function MapwithDefault in NWDS?

    Hi Folks, Do we have any standard function available in NWDS for achieving the MapwithDefault mapping. FYI, I am trying to propagate the tag of the field for no input value in the source.

  • How to edit a resue address

    I used my wifes email address as my rescue address as I don't have a alternative, which it asked for.  How can I edit and remove it, I feel I might have created a problem.