topic Re: Checking FTD interface mac address when in a port channel in Network Security

Checking FTD interface mac address when in a port channel

mrjelly — Fri, 03 Nov 2023 15:06:40 GMT

Hello,

I am looking to see the MAC address of a FTD interface that is part of a port channel.

On the CLI all I can appear to do is run:

show interface PORT-CHANNEL and it shows one mac address, not one for each interface.

thank you

Re: Checking FTD interface mac address when in a port channel

Marvin Rhoads — Fri, 03 Nov 2023 16:25:20 GMT

A firewall portchannel uses the MAC address of the first member interface. I verified on the switches this one connects to that they show the same in their MAC address table.

# show interface | i Inter|MAC|Member|Active <snip> Interface GigabitEthernet0/5 "", is up, line protocol is up Active member of Port-channel1 MAC address 3890.a575.3bdf, MTU not set Interface GigabitEthernet0/6 "", is up, line protocol is up Active member of Port-channel1 MAC address 3890.a575.3be4, MTU not set I<snip> Interface Port-channel1 "", is up, line protocol is up MAC address 3890.a575.3bdf, MTU not set Members in this channel: Active: Gi0/5 Gi0/6

Re: Checking FTD interface mac address when in a port channel

MHM Cisco World — Sat, 04 Nov 2023 16:20:56 GMT

the Port-Channel for FTD and all other Cisco platform use only one MAC address and this mac is mac of one of port member.
so what you see is normal.

Thanks A Lot
MHM