Comments on: HowTo: Find switchport for a MAC Address on a Cisco Catalyst Switch

By: Kelvin

Kelvin — Fri, 08 Apr 2011 12:44:01 +0000

Hi,
I need some help,please show me a way whereby you can
trace mac address to port because somebody is sniffing
my network….

By: Nadeem

Nadeem — Mon, 31 Jan 2011 09:26:13 +0000

Great Post!…………It is very helpful….Thank you very much

By: joe

joe — Tue, 21 Sep 2010 13:56:40 +0000

Hi,
I’m try to locate where the MAC address connected to but it not showing on the interfaces. Below is how I figure. Can you please help / explain to me?

core>sh ip arp f6d0.9822.bb06
Protocol Address Age (min) Hardware Addr Type Interface
Internet 148.171.207.78 2 f6d0.9822.bb06 ARPA Vlan142

core>sh mac-address-table address f6d0.9822.bb06

vlan mac address type learn age ports
——+—————-+——–+—–+———-+————————–
Supervisor:
* 142 f6d0.9822.bb06 dynamic Yes 0 Po202

core>sh etherchannel summary

Group Port-channel Protocol Ports
——+————-+———–+———————————————–
202 Po202(SU) – Gi4/33(P) Gi4/34(P)

core>sh mac-address-table interface GigabitEthernet4/33

vlan mac address type learn age ports
——+—————-+——–+—–+———-+————————–
No entries present.

core>sh mac-address-table interface GigabitEthernet4/34

vlan mac address type learn age ports
——+—————-+——–+—–+———-+————————–
No entries present.

By: nik

nik — Wed, 16 Jun 2010 22:47:02 +0000

sh ip dhcp snooping binding int f0/22

#sh ip dhcp snooping binding int f0/22
MacAddress IpAddress Lease(sec) Type VLAN Interface
—————— ————— ———- ————- —- ——————–
00:1A:A0:91:xx:xx 10.15.26.168 85502 dhcp-snooping 626 FastEthernet0/22
Total number of bindings: 1

By: shareef

shareef — Thu, 06 May 2010 07:09:11 +0000

I have server with four NIC Card all are connected to One Core Switch 6500, some are configure as virtual ip address those are phyiscal connected also, and giving same Mac Address, i want to know connect port of each interface on switch. please send the command to find out
which port ip address are connected and port Numbers.

thanks in advance
shareef

By: vijesh

vijesh — Mon, 26 Apr 2010 08:30:18 +0000

really helpful,thank u very much,,

By: Florin Sfetea

Florin Sfetea — Thu, 28 Jan 2010 11:47:37 +0000

on your core router holding all your gateways try

sh ip arp xxxx.xxxx.xxxx

you should get the
protocol ip_Address Age Hardware Addr(MAC) Type Interface
eg.
Internet 192.x.x.x 80 xxxx.xxxx.xxxx ARPA VlanXX

By: amit

amit — Sat, 16 Jan 2010 08:13:27 +0000

thanks

amit yadav

By: gip

gip — Fri, 30 Oct 2009 17:40:21 +0000

I’ve read many of these articles explaining this process but where I always have trouble is obtaining the correct MAC address. From the core switch, when I perform a sh ip arp 10.x.x.x I get a blank response. When I try this from a distribution switch, I get a MAC address in return, but not the MAC of the actual system I’m trying to locate. I believe it’s the MAC address of the etherchannel Po1 that’s being returned. I verified this by RDP’ing to the actual system and verifying it’s MAC address, but many times, this is not possible. Argghhh, might have to look into this ziptie thing.

By: Cisco

Cisco — Mon, 26 Oct 2009 12:52:21 +0000

how to bind an public Ip with the MAC address in either Cisco switch 2960 or Cisco Router 1842 series