topic Re: Active-Active firewall and virtual MAC address in Network Security

Active-Active firewall and virtual MAC address

ayman emara — Mon, 11 Mar 2019 18:47:20 GMT

Hi All,

i have Active - Active firewall and want to change the firewall virtual MAC address.!!!

is it possible ?? and if it is ,how can i do it??

Thanks in advance,

Ayman

Re: Active-Active firewall and virtual MAC address

mirober2 — Wed, 29 Sep 2010 18:25:59 GMT

Hi Ayman,

Yes, you can do this with the 'mac address' command. Here is the command reference;

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2026897

Hope that helps.

-Mike

Re: Active-Active firewall and virtual MAC address

ayman emara — Wed, 29 Sep 2010 18:33:51 GMT

HI mike,

the commands are in active- standby mode.

is it applied also in active - actvie mode.

thanks

Ayman

Re: Active-Active firewall and virtual MAC address

mirober2 — Wed, 29 Sep 2010 18:36:52 GMT

Hi Ayman,

Yes, you would do it within the failover group. Here is an example from the command reference:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/m.html#wp2026897

hostname(config)# failover group 2
hostname(config-fover-group)# secondary
hostname(config-fover-group)# preempt 100
hostname(config-fover-group)# mac address e1 0000.a000.a011 0000.a000.a012 
hostname(config-fover-group)# exit

Hope that helps.

-Mike

Re: Active-Active firewall and virtual MAC address

ayman emara — Wed, 29 Sep 2010 19:00:26 GMT

Thanks Mike it really helps

many many thanks

Ayman

Re: Active-Active firewall and virtual MAC address

ayman emara — Wed, 29 Sep 2010 19:15:28 GMT

Hi mike,

this will change the secondary MAC address only.

can i do this commands for the primary group also.

Regards,

Ayman yehia

Re: Active-Active firewall and virtual MAC address

mirober2 — Wed, 29 Sep 2010 19:42:51 GMT

Hi Ayman,

Yes, you can do this command for either failover group while you are in (config-fover-group)# mode.

Hope that helps.

-Mike