Unique MAC addr required for shared interfaces Security Context?

steven.pw.lau · ‎03-13-2008

Hi,

I've a question on security context.

For shared interfaces,

Let's say we have a shared interface of the outside interface using subinterfaces, fa0/0.1 and fa0/0.2.

Both fa0/0.1 and fa0/0.2 is connected to the same network 192.1.1.0/24

fa0/0.1 (.1)

fa0/0.2 (.2)

1. Does both subinterfaces require a unique MAC address assigned to them? This has to be done in each context mode, right?

2. Can I have another option, instead of manually assigning the unique MAC addr, I 'll auto generate the MAC addr to each interfaces? How does the mac-address auto in the global config works? Does it auto generate a mac-addr for each context's subinterfaces?

Thanks.

jsivulka · ‎03-19-2008

The subinterfaces will not require unique mac address if the traffic does not flows between them. mac address auto generate will not be a good option for this.you have to manually configure the mac addresses.