CSS11501 and ARP TAble

[samerhj]

I have the following case:

CSS11501 is connected to a L2 switch, and two PIXes are connected to this same switch, and the three devices: CSS and two pixes are in the same subnet. the CSS could ping only one of the PIXes, not the other. when issuing show arp command it gives that the two pixes have the same MAC address. Is there any suggestion?

[Gilles Dufour]

I find it strange that 2 pixes have the same mac address. Are they in active/standby configuration ?

If so, you should not need to ping the 2nd pix.

Is that a multicast mac address ? [0x01....]

Did you change the mac address of the pix ?

Looks like a non-CSS issue.

Fixed the mac address on the pix and everything will be ok.

Regards,

Gilles.

[samerhj]

Thank you for your reply

The pixes are not active/standby, and the MAC is not multicast one, and the PIX mac are not touched. any other ideas?

[jfoerster]

HI,

from the description this sounds a lot like a failover bundel. Is each interface of the Pix being able to ping another IP-Address in the segment of the CSS? Are there other devices which are able to do arp "poisoning"?

Cheers,

Joerg

[samerhj]

Thank you all

It was a PIX problem. A false static nat was the cause.