[c-nsp] MAC-to-IP script on IOS

James Bensley jwbensley at gmail.com
Tue May 29 04:05:34 EDT 2012


Hi Ulrich,

The only problem with pinging every IP in the subnet assigned to an
interface (for example) is that multiple IPs may reside on the same
IP. Take a firewall for example, if multiple IPs are routed to a
firewall (say 192.168.1.10 to 192.168.1.20). It's address maybe
192.168.1.10 and 192.168.1.11-20 are then used for 1:1 NAT of internal
hosts; How will you know which IP is the firewall? They will all be
reached by the same MAC address? There is one to many relation here,
is that going to be a problem?

Just my two pence,
James.


More information about the cisco-nsp mailing list