Any tool to trace a MAC address to its source switch?

[limtohsoon]

Hi Sir,

In a switched campus network, given a MAC address, is there any tool that can trace the MAC address to its source switch, i.e. the switch to which the host with that MAC address connects?

Please advise.

Thank you.

B.Rgds,

Lim TS

[paddyxdoyle]

I don't think there is a tool as such, l2trace on CATOS springs to mind which plots the switching path taken from one MAC address to another:

http://www.cisco.com/en/US/products/hw/switches/ps700/products_configuration_guide_chapter09186a008007fa31.html#xtocid212210

You can manually find a MAC/switch port association quite easily which i have documented here:

http://www.zandernetworks.co.uk/technotes/Tech%20Note%2005.pdf

HTH

Paddy

[jroyster · Accepted solution]

Ciscoworks has a nice tool to locate by switch/port any node by mac, ip or hostname.

[limtohsoon]

Hi,

You are right. User Tracking in Campus Manager can do that.

Thank you.

B.Rgds,

Lim TS

[Alexander_Nichev]

Hi,

you can try extended traceroute:

s-plo-5223#traceroute ?

WORD Trace route to destination address or hostname

appletalk AppleTalk Trace

clns ISO CLNS Trace

ip IP Trace

ipv6 IPv6 Trace

ipx IPX Trace

mac Trace Layer2 path between 2 endpoints

oldvines Vines Trace (Cisco)

vines Vines Trace (Banyan)

And put mac instead of ip ;)

hope that helps.

[johansens]

As someone already has said, use the "traceroute mac" command. There are some restrictions though. Read more about it here (this is for 6500/7600 with 12.2SX):

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a00804357b3.html

It's supported on these platforms:

•Catalyst 2940 switches

•Catalyst 2950 switches running Cisco IOS Release 12.1(12c)EA1 or later

•Catalyst 2955 switches

•Catalyst 2970 switches

•Catalyst 3550 switches running Cisco IOS Release 12.1(12c)EA1 or later

•Catalyst 3750/3750Metro switches

•Catalyst 4000 switches running Catalyst software Cisco IOS Release 6.2 or later for the supervisor engine

•Catalyst 4500 switches as well

•Catalyst 5000 switches running Catalyst software Cisco IOS Release 6.1 or later for the supervisor engine

•Catalyst 5500 switches as well

•Catalyst 6000 switches running Catalyst software Cisco IOS Release 6.1 or later for the supervisor engine

•Catalyst 6500/7600 switches as well..

So if your campus network consists of a combo of those switches and fulfill the other requirements, you should be able to do a nice L2 traceroute.. :)

[walleyewiz]

We use freeware called switchmap. Here is the link:

http://sourceforge.net/projects/switchmap/