Does ASA5505 allow MAC address cloning?

[Bonneville850]

Greetings,

I would like to clone the MAC address of my ISP-supplied router to an ASA 5505 firewall to be used in router mode. Is this possible?

[Maykol Rojas]

Hi,

If your question is related to the fact that if you can change the burned mac-address of the interface to any other mac-address you want, then yes, it is possible. You can use the mac-address command withing the interface configuration mode and put whatever mac-address you want.

Mike.

[Bonneville850]

Thanks for that Mike.

I mistakenly thought VLAN 2 would be configured out of the box. As soon as I ran "configure factory-default" then I was able to assign a MAC address to VLAN 2 (and in effect, e0/0).

One more question. When I run "show switch mac-address-table", I see four MAC addresses listed as belonging to VLAN 2. Besides the one I just set (which is listed as "static") there are two listed as "dynamic" and one "static broadcast".

Do you have any idea what those three other MAC addresses would be?

[Maykol Rojas]

Hi Kurt,

That command shows the dynamically MAC entries learned by the firewall. 1 must be from your default gateway, the other two I dont have a clue, you can try to do a show arp and check what are the other IP addreses.

Mike