topic Does ASA5505 allow MAC address cloning? in Network Security

Does ASA5505 allow MAC address cloning?

Bonneville850 — Mon, 11 Mar 2019 21:20:29 GMT

Greetings,

I would like to clone the MAC address of my ISP-supplied router to an ASA 5505 firewall to be used in router mode. Is this possible?

Does ASA5505 allow MAC address cloning?

Maykol Rojas — Sat, 03 Sep 2011 02:32:05 GMT

Hi,

If your question is related to the fact that if you can change the burned mac-address of the interface to any other mac-address you want, then yes, it is possible. You can use the mac-address command withing the interface configuration mode and put whatever mac-address you want.

Mike.

Does ASA5505 allow MAC address cloning?

Bonneville850 — Sat, 03 Sep 2011 11:03:59 GMT

Thanks for that Mike.

I mistakenly thought VLAN 2 would be configured out of the box. As soon as I ran "configure factory-default" then I was able to assign a MAC address to VLAN 2 (and in effect, e0/0).

One more question. When I run "show switch mac-address-table", I see four MAC addresses listed as belonging to VLAN 2. Besides the one I just set (which is listed as "static") there are two listed as "dynamic" and one "static broadcast".

Do you have any idea what those three other MAC addresses would be?

Does ASA5505 allow MAC address cloning?

Maykol Rojas — Mon, 05 Sep 2011 16:24:15 GMT

Hi Kurt,

That command shows the dynamically MAC entries learned by the firewall. 1 must be from your default gateway, the other two I dont have a clue, you can try to do a show arp and check what are the other IP addreses.

Mike