Virtual MAC-Address on Solaris 10 update 9

Hi,
i'm installing Solaris 10 update 9 on UCS B-Series (B230 M2 or B440 M2) with M72KR-Q Adapter. We create the Service Profile with vNIC associated to vNIC Template. The vNIC Template use the MAC Pool Address configurated.
When we run ifconfig -a on Solaris we can view only the original MAC-Address instead of Virtual MAC-Addres. Is this correct?
Thanks in advance

When you say the "original" MAC are you referring to the Hardware Default?
Ensure your MAC pool has available addresses also. You can also test unbinding the vNIC template from the Solaris service profile, and manually assigning a MAC address (watch for overlap) to the vNIC and see if that pushes to the solaris host.
If that works, then you have a pool/template issue. If not, we'll need to investigate further.
Regards,
Robert

Similar Messages

NATing to the virtual MAC address of an HSRP group problems...

Hello
I have a problem where I need to NAT various IP addresses, and need the NATd addresses to carry the virtual MAC address of the HSRP group on the onward travels..
By default, with the Cisco 871's I'm using, the packets are NATd, but carry the MAC address of the external interface.. not the virtual MAC address.
The problem is that when I failover to the standby 871, the packets will then have the MAC address of the standby (new active) 871. This causes problems because my next hop doesn't update its ARP tables (very infrequent updates).
The next hop will accept packets NATd by the standby (now live), but will continue to send reply (eg ICMP) to the live (now standby) because it hasn't updated its ARP table.
I know that I can create a NAT pool with the virtual IP address as the only member of the pool. Packets will then have the virtual MAC address, and the problem will be fixed, but if I need to NAT IP addresses to *different* NATd addresses, then I would have to create multiple HSRP groups, with different virtual IP's and MAC's, and then create multiple NAT pools...
If I can't get my next hop (which I have minimal control over) to refresh/update it's ARP table, then I will consider the multiple HSRP group config, but before I try that I would like to know whether I would be able to have multiple virtual IP's and MAC's on a single interface. Apparently there was a problem with the Catalyst 2500/4500 series where the same MAC address would be used for all HSRP groups, and you had to use burned-in MAC addresses for HSRP groups.. which wouldn't provide a solution in this case..
Any ideas on how to fix this would be greatly appreciated. BTW I have proxy-arp on external interface, and gratuitous arp.
My software version is:
Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.3(8)YI1, RELEASE SOFTWARE (fc1)
Synched to technology version 12.3(10.3)T2
Many thanks,
Michael Blake.

Hello Michael,
you might want to have a look at the documents below, describing two techniques developed for the problem of NAT in an HSRP environement:
NAT Stateful Failover of Network Address Translation.
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t13/ftsnat.htm
NAT Static Mapping Support with HSRP for High Availability
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t4/ftnthsrp.htm
Regards,
GP

Windows Network Load Balancing - Virtual MAC Address

Hi All,
I have environment that running 2 Exchange 2010 server with CASHT and join windows network load balancing as a node.
My question is,
If NLB service is restart, is it virtual MAC Address for NLB will change to new virtual MAC Address?
Thanks for response,
Best Regards,
Henry Stefanus

Hi Henry Stefanus,
The NLB work mechanism will not change whether what higher application we used and I am not very familiar with Exchange NLB architecture, may the following KB and article
may help you.
When you use the unicast method, all cluster hosts share an identical unicast MAC address. Network Load Balancing overwrites the original MAC address of the cluster adapter
with the unicast MAC address that is assigned to all the cluster hosts.
When you use the multicast method, each cluster host retains the original MAC address of the adapter. In addition to the original MAC address of the adapter, the adapter is
assigned a multicast MAC address, which is shared by all cluster hosts. The incoming client requests are sent to all cluster hosts by using the multicast MAC address.
Selecting the Unicast or Multicast Method of Distributing Incoming Requests
http://technet.microsoft.com/en-us/library/cc782694(v=ws.10).aspx
The related third party article:
Building NLB Exchange 2010 RTM CAS / HT Servers (Hyper-V) – Part 1
http://blog.morecoffeeany1.com/2010/03/19/building-nlb-exchange-2010-rtm-cas-ht-servers-hyper-v-%E2%80%93-part-1/
I’m glad to be of help to you!
*** This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these
sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. There are inherent dangers in the use
of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet. ***
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Mac address in solaris

Hi all,
Actually to find the Mac address in solaris OS , We need to do it in super user mode.
But without move to root mode , how can we get the mac address through command.
Is there any way,
If anybody knows please reply.
Thanks.

Actually to find the Mac address in solaris OS ,
We need to do it in super user mode.
But without move to root mode , how can we get
the mac address through command.
Is there any way,Not possible.

ACE virtual mac address allocation

We're running ACE SM and seeing all the VIP addresses, NAT addresses and alias addresses in the ARP table below being assigned the same virtual MAC address. How then would a packet find the correct source/destination if all these MAC addresses are the same?
IP ADDRESS      MAC-ADDRESS        Interface Type      Encap NextArp(s) Status
================================================================================
204.107.54.1    00.24.f9.03.08.00 vlan810   GATEWAY    300    263 sec      up
204.107.54.4    00.1e.13.3c.ab.80 vlan810   LEARNED    24     7631 sec     up
204.107.54.5    00.1e.13.3c.a6.00 vlan810   LEARNED    331    8992 sec     up
204.107.55.5    00.1f.ca.7b.70.23 vlan810   INTERFACE LOCAL     _         up
204.107.55.6    00.0b.fc.fe.1b.05 vlan810   ALIAS      LOCAL     _         up
204.107.54.20   00.0b.fc.fe.1b.05 vlan810   VSERVER    LOCAL     _         up
204.107.54.21   00.0b.fc.fe.1b.05 vlan810   VSERVER    LOCAL     _         up
204.107.54.22   00.0b.fc.fe.1b.05 vlan810   VSERVER    LOCAL     _         up
204.107.54.23   00.0b.fc.fe.1b.05 vlan810   VSERVER    LOCAL     _         up
204.107.54.31   00.0b.fc.fe.1b.05 vlan810   VSERVER    LOCAL     _         up
204.107.54.32   00.0b.fc.fe.1b.05 vlan810   VSERVER    LOCAL     _         up
204.107.54.33   00.0b.fc.fe.1b.05 vlan810   VSERVER    LOCAL     _         up
Thanks.

ACE uses the concept of Virtual Mac Addresses , which are the addresses used for VIP addresses, NAT addresses (dynamic and static), and alias addresses These will all always use a MAC address in the following form 00.0b.fc.fe.1b.
If you are using single ACE SM in a cat6k box, and you are seeing duplicate MAC, its normal. Cat6k Supervisor is L2 Adjacent with ACE, Any traffic received by Supervisor in VLAN 810 will be sent to ACE and then ACE will determine which VIP that packet is going to.
Real Problem will come when you are using multiple ACE modules in Same Chassis or you are doing Chassis to Chassis ACE Redundancy. In such situation your Cat6k Switch will have duplicate MAC entries.
To avoid this, you need to keep your Contexts in diffrent context groups in each Module i.e something like this
ft group 5
peer 1
priority X
associate-context default3
inservice

MAC Address-Table Move Update Feature

Hi guys
Does 6500 SUP720/2T support MAC Address-Table Move Update Feature?
I cannot find it in anywhere..
Thanks very much!
QXZ

Hi,
Please refer following link :
http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a00807347ab.shtml
CAM
—All Catalyst switch models use a CAM table for Layer 2 switching. As frames arrive on switch ports, the source MAC addresses are learned and recorded in the CAM table. The port of arrival and the VLAN are both recorded in the table, along with a timestamp. If a MAC address learned on one switch port has moved to a different port, the MAC address and timestamp are recorded for the most recent arrival port. Then, the previous entry is deleted. If a MAC address is found already present in the table for the correct arrival port, only its timestamp is updated.
regards,
Ajay Kumar

Configuring Virtual MAC Addresses on ASA

Hello,
I configure the virtual MAC address for a interface on ASA 5520, will enter the following command on the active unit:
failover mac address Inside 0012.3456.789a 0023.4567.89ab
The active MAC address is of the same as the Inside's burned-in MAC address of the active unit.
Similarly, the standby MAC address is of the same as the Inside's burned-in MAC address of the standby unit.
Do I get the effect of failover mac address command?
Thank you for your cooperation in advance.

Hi Bro
That’s fine really. There’s nothing wrong if you’ve configured the active MAC address the same as the Inside's burned-in MAC address of the active unit.
In an Active/Standby failover, the MAC addresses for the primary unit are always associated with the active IP addresses. If the secondary unit boots first and becomes active, it uses the burned-in MAC address for its interfaces. When the primary unit comes online, the secondary unit obtains the MAC addresses from the primary unit. The change can disrupt network traffic.
You can configure virtual MAC addresses for each interface to ensure that the secondary unit uses the correct MAC addresses when it is the active unit, even if it comes online before the primary unit. If you do not specify virtual MAC addresses the failover pair uses the burned-in NIC addresses as the MAC addresses.
P/S: If you think this comment is useful, please do rate them nicely :-)

Will my MAC Address change after updating OS?

I am using wi-fi network that needs the mac address. If I update my Firefox OS version, will the mac address be changed again?

Here is a few things that you can try.
1. Try booting to safe mode by holding the shift key while starting up.
2. Reset the SMC
3. Reset the PRAM
Hope this helps!

MAC address question - Solaris Intel

I am running Solaris 8 for Intel and using the Intel Ether Express Pro 100TX (iprb driver) network card and I need to permanently override the card's MAC address. Temporarily, I have used ifconfig to change the card's ether address, but as you know, that's only good until you reboot. The setting isn't in the iprb.conf file (and it's not like I have the luxury of having an OpenBoot eeProm).
If anybody knows, I appreciate your help. - Ken

The Mac addresses in intel cards are burnt into a serial eeprom on the card. So you can't change it. :-)

MAC address when solaris is in run level 0 mode

Hi
My system is at level 0 mode with the ok prompt. How to identify its MAC address?
thx

Hello
"ok" prompt means the operating system has not been loaded yet on a Sparc machine?!
In this state you can get the MAC address by typing
.idprom(dot-idprom)
Martin

Mac-address-table takes too long to update on 4507R

Hi,
I'm trying to use spectralink phones, I have autonomous APs on seperate 2960s (and one on the 4507) - when the phones roam between the APs it takes very long for the mac address table to update on the 4507 even though there's uplink traffic.
I have supervisor engine II+ (I read there are problems in previous versions)
can anyone help?
thanks

Upgrading the switch could help avoid this problem..

HSRP - Duplicate address on Vlan, sourced by mac-address

Hi ,
Network structure
Switch A --- Customer firewall 1
|
Switch B --- Customer firewall2
May be some one can help me.
There was a nagious alert yesterday and on investigation I found the 'Duplicate address x.x.x.x(VIP) on Vlanxxx, sourced by 0006.b19c.c5d9' error
It a HA feed from our switches which is going to customer firewalls.
On further investigation I have found on our switch A the ARP table is not learning the VIP address from this mac-address where as on switch B is learning the VIP address through mac 0006.b10c.c8d9 which is customer sonic firewall which is not a normal behaviour.
Our switches are Cisco 3560 switch.
Please if you could let me know what causing this.

Hi mcgowan,
Yes, there is duplicate MAC. But, its duplicate between interface vlan address and virtual MAC address on HSRP.
when I type command :
show mac address | i 0000.0c07.ac01
It shows me :
100 0000.0c07.ac01 STATIC CPU
I think this MAC generate by system on HSRP. Currently I shutdown interface vlan 100 on switch A, like as your suggestion. But the impact is my client will get trouble when switch B is down, because HSRP is not running well.
Regards,
Rakhmad

HSRP : routers respond with virtual mac AND physical mac to ARP requests

Hello.
I've noticed a very strange behaviour on my two Cisco's 2621 with HSRP configured.
But first, this is a simplified schema of my current network.
1. Summary
- IOS version : 12.2(37)
- File image : c2600-ik9o3s-mz.122-37.bin
- R1 is the active router.
- Both have tagged virtual interfaces : f0/0.10 & f0/0.60
- NAT functionnality is enabled.
     - f0/0.10 is configured as outside.
     - f0/0.60 is configured as inside.
2. Configuration samples
R1
interface FastEthernet0/0.10
encapsulation dot1Q 10
ip address 192.168.0.254 255.255.255.0
ip nat outside
service-policy output parent_out_internet
no ip mroute-cache
standby 10 ip 192.168.0.2
standby 10 priority 120
standby 10 preempt
interface FastEthernet0/0.60
encapsulation dot1Q 60
ip address 192.168.1.254 255.255.255.0
ip nat inside
no ip mroute-cache
no cdp enable
standby 60 ip 192.168.1.1
standby 60 priority 120
standby 60 preempt
ip nat pool ovrld 192.168.0.2 192.168.0.2 prefix-length 24
ip nat inside source list internet pool ovrld overload
R2
interface FastEthernet0/0.10
encapsulation dot1Q 10
ip address 192.168.0.253 255.255.255.0
ip nat outside
service-policy output parent_out_internet
no ip mroute-cache
standby 10 ip 192.168.0.2
standby 10 preempt
interface FastEthernet0/0.60
encapsulation dot1Q 60
ip address 192.168.1.253 255.255.255.0
ip nat inside
no ip mroute-cache
no cdp enable
standby 60 ip 192.168.1.1
standby 60 preempt
ip nat pool ovrld 192.168.0.2 192.168.0.2 prefix-length 24
ip nat inside source list internet pool ovrld overload
3. Events.
- When HSRP first runs or when there is a topology change, the active router sends correct ARP gratuitous reply packets (with the virtual MAC address)
- ARP table is filled in on the Internet router.
- When the ARP entry in the table expires it asks for the virtual IP mac address (192.168.0.2).
- R1 responds with the virtual MAC address ---- BUT ---- R2 also responds with its physical mac address !
- So packets are sent to the wrong router (R2) which can't route any packets because the NAT table is not up to date. I don't even have NAT command to synhronize NAT sessions between routers. But anyway, it should not solve my issue.
It occurs only on the NAT (outside) interface. On the other virtual interfaces it behaves as expected.
I don't have any explanations to this behaviour.
For the moment, I have to keep R2 offline and bring it back online in case of failure.
I tried several workarounds but I can neither filter ARP packets (no such function) on my router nor on my switch (too restrictive).
If I forgot any information please ask me.
Any help would be very much appreciated.

Hello.
I've noticed a very strange behaviour on my two Cisco's 2621 with HSRP configured.
But first, this is a simplified schema of my current network.
1. Summary
- IOS version : 12.2(37)
- File image : c2600-ik9o3s-mz.122-37.bin
- R1 is the active router.
- Both have tagged virtual interfaces : f0/0.10 & f0/0.60
- NAT functionnality is enabled.
     - f0/0.10 is configured as outside.
     - f0/0.60 is configured as inside.
2. Configuration samples
R1
interface FastEthernet0/0.10
encapsulation dot1Q 10
ip address 192.168.0.254 255.255.255.0
ip nat outside
service-policy output parent_out_internet
no ip mroute-cache
standby 10 ip 192.168.0.2
standby 10 priority 120
standby 10 preempt
interface FastEthernet0/0.60
encapsulation dot1Q 60
ip address 192.168.1.254 255.255.255.0
ip nat inside
no ip mroute-cache
no cdp enable
standby 60 ip 192.168.1.1
standby 60 priority 120
standby 60 preempt
ip nat pool ovrld 192.168.0.2 192.168.0.2 prefix-length 24
ip nat inside source list internet pool ovrld overload
R2
interface FastEthernet0/0.10
encapsulation dot1Q 10
ip address 192.168.0.253 255.255.255.0
ip nat outside
service-policy output parent_out_internet
no ip mroute-cache
standby 10 ip 192.168.0.2
standby 10 preempt
interface FastEthernet0/0.60
encapsulation dot1Q 60
ip address 192.168.1.253 255.255.255.0
ip nat inside
no ip mroute-cache
no cdp enable
standby 60 ip 192.168.1.1
standby 60 preempt
ip nat pool ovrld 192.168.0.2 192.168.0.2 prefix-length 24
ip nat inside source list internet pool ovrld overload
3. Events.
- When HSRP first runs or when there is a topology change, the active router sends correct ARP gratuitous reply packets (with the virtual MAC address)
- ARP table is filled in on the Internet router.
- When the ARP entry in the table expires it asks for the virtual IP mac address (192.168.0.2).
- R1 responds with the virtual MAC address ---- BUT ---- R2 also responds with its physical mac address !
- So packets are sent to the wrong router (R2) which can't route any packets because the NAT table is not up to date. I don't even have NAT command to synhronize NAT sessions between routers. But anyway, it should not solve my issue.
It occurs only on the NAT (outside) interface. On the other virtual interfaces it behaves as expected.
I don't have any explanations to this behaviour.
For the moment, I have to keep R2 offline and bring it back online in case of failure.
I tried several workarounds but I can neither filter ARP packets (no such function) on my router nor on my switch (too restrictive).
If I forgot any information please ask me.
Any help would be very much appreciated.

Why "mac-address-table static 0000.0c07.ac01 interface FastEthernet1/0 vlan 3" in the router ?

Hi All
I did not type the following command. Why does it appear when I show run ? Which command can cause the issue? Thank you
mac-address-table static 0000.0c07.ac01 interface FastEthernet1/0 vlan 3

Hello,
It looks as if you have HSRP configured. Mac address 0000.0c07.ac01 is the HSRP virtual mac address. 01 at the end of the mac represents the HSRP group number.
Hope this helps,
Please rate helpful answers.
Thanks.

VRRP MAC address

Please tell me what MAC address VRRP uses for the virtual IP. Do all cisco IOS use only one unique MAC for one VRRP group? What about the virtual MAC address in case master failure, does new master(previously backup) still use same virtual MAC after previous master fails?
Also I want to know if it is possible that IOS answer ARP request for the virtual IP with master's real physical MAC address in some cases.
For example, R1 e0 is configed with VRRP, its physical MAC address is MAC-PHY, virtual MAC for that virtual ip is MAC-VIR. When ping the virtual IP, master R1 answer ARP with MAC-PHY, or other MAC than MAC-VIR. Is that possible in some cases?
I used 2610 and 3610 IOS 12.3 test it. And I found it always use same virtual MAC. But I am not sure different platform/IOS has different beheavior.
Thanks in advance.

Please tell me what MAC address VRRP uses for the virtual IP. Do all cisco IOS use only one unique MAC for one VRRP group?
>>>The virtual router MAC address associated with a virtual router is an IEEE 802 MAC Address in the following format:
00-00-5E-00-01-{VRID} (in hex in internet standard bit-order)
The first three octets are derived from the IANA's OUI. The next two octets (00-01) indicate the address block assigned to the VRRP protocol. {VRID} is the VRRP Virtual Router Identifier. This
mapping provides for up to 255 VRRP routers on a network.
What about the virtual MAC address in case master failure, does new master(previously backup) still use same virtual MAC after previous master fails?
>>> Yes, per above that mac-address is associated to Virtual Router.
Also I want to know if it is possible that IOS answer ARP request for the virtual IP with master's real physical MAC address in some cases.
For example, R1 e0 is configed with VRRP, its physical MAC address is MAC-PHY, virtual MAC for that virtual ip is MAC-VIR. When ping the virtual IP, master R1 answer ARP with MAC-PHY, or other MAC than MAC-VIR. Is that possible in some cases?
>>> I don;t think so since there is no interface command to tell router to use BIA for VRRP much like the HSRP.
I used 2610 and 3610 IOS 12.3 test it. And I found it always use same virtual MAC. But I am not sure different platform/IOS has different beheavior.
>>> It's not platform dependent it's how it operate per RFC 2338.
Please rate helpful posts.

Virtual MAC-Address on Solaris 10 update 9

Similar Messages

Maybe you are looking for