Juniper SSG - How to change interface MAC address?

Hi all,

I have two Juniper SSG's connected together using e0/1 on each. This was only set up recently.

I am having connectivity issues and it turns out that both e0/1 interfaces have the same MAC address. From what I've read on the web, you can only change the interface MAC address if the Juniper is in transparent mode. Can anyone tell me if this is wrong? I haven't been able to find a way to change it myself.

All interfaces are in use on each Juniper.

I think I have two options if I can't change the MAC address on one of the interfaces:

1) Change our failover/nsrp interface to e0/1 on one of the Junipers to make an interface with a differant MAC address available

2) Put a routing device between the two Junipers.

Cheers.

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

ConstantlyLearning

Looks like the issue is caused by both sides having an NSRP cluster which creates virtual MAC addresses for the interfaces using the formula from the below URL:

Juniper Networks - How is the virtual MAC address for a pair of Active/Passive firewalls derived? - Knowledge Base

ConstantlyLearning

Going to use a different interface on the remote firewall to resolve the MAC address issue.