Hopefully my IP won't change my IP again now that I'm not making any other changes to either Eth 0/0 or VLAN 2. This command will show the internal MAC address-table of the switch or router that you are on. I would have to do some wireshark captures on the outside interface to see exactly what is going on. There is no other way to check the physical mac address of other device from the ASA. Usually firewalls filter on layer 3 IP addresses, not layer 2 ethernet addresses. And that information is not completely "burned in" to the ASA5505, because changing Nameif changes the IP. Ping the physical interface ip address from the ASA, and whatever the arp association of the ip address should show up under 'show arp'. You can try to create a static arp entry on ASA with an fictitious ip for that particular MAC and use ACL to block that IP. My conclusion is the ISP must see some information besides the VLAN MAC address to decide whether to reissue the same IP or a new one. But when I did that, my assigned IP changed yet AGAIN. The external site has a DSL modem that is setup in Static Pass through mode. They connect to the hostname (or IP address) of our ASAs outside interface. We used to be able to view it remotely but after I upgraded the ASA to version 8.4 (4)1 it doesn't seem to work anymore. But could not find the Cisco An圜onnect secure mobility client connection. Here's another curious thing: I had occasion to change the name of the outside interface using Nameif. Our company has an external site with a camera system setup for security. Cisco Systems ASA 5510, ASA 5512-X, ASA 5515-X, ASA 5520, ASA 5525-X, ASA 5540, ASA 5545-X, ASA 5550, ASA 5555-X, ASA 5580, ASA 5585-X, ASA 5505 Adding a. So I set the MAC address on VLAN 2 (which I assigned to the outside interface) to be the same as that of the WAN MAC address of my old Linksys router. ,, '' interface Port-channel1.2 description OFFICENET vlan 2 nameif inside security-level 100 ip address 192. And I want to keep my IP address from changing.
I wanted to do the same thing because my ISP uses "sticky" IP addresses that are like DHCP addresses that don't change once issued, as long as your MAC address doesn't change. When you use bridge groups, the ASA learns and builds a MAC address table in a similar way as a normal bridge or switch: when a device sends a packet through the bridge group, the ASA adds the MAC address to its table.
0 kommentar(er)
