[c-nsp] cisco ASA using many time the same MAC and HP switches

Philippe Strauss philou at philou.ch
Thu Nov 1 12:42:03 EDT 2007


I've just noticed an interesting "feature": ASA firewalls use the same
MAC address for many interfaces, either VLAN interfaces "SVI" (5505)
or SubInterface (5520).

HP switch don't like that much, it seems they have only one global
forwarding database across all VLAN, by deduction I guess catalyst have
one forwarding database per VLAN.

Anybody came to the same conclusion

-- 
Philippe Strauss
av. de Beaulieu 25
1004 Lausanne
http://philou.ch


More information about the cisco-nsp mailing list