Options
Juniper SSG - How to change interface MAC address?
ConstantlyLearning
Member Posts: 445
in Juniper
Hi all,
I have two Juniper SSG's connected together using e0/1 on each. This was only set up recently.
I am having connectivity issues and it turns out that both e0/1 interfaces have the same MAC address. From what I've read on the web, you can only change the interface MAC address if the Juniper is in transparent mode. Can anyone tell me if this is wrong? I haven't been able to find a way to change it myself.
All interfaces are in use on each Juniper.
I think I have two options if I can't change the MAC address on one of the interfaces:
1) Change our failover/nsrp interface to e0/1 on one of the Junipers to make an interface with a differant MAC address available
2) Put a routing device between the two Junipers.
Cheers.
I have two Juniper SSG's connected together using e0/1 on each. This was only set up recently.
I am having connectivity issues and it turns out that both e0/1 interfaces have the same MAC address. From what I've read on the web, you can only change the interface MAC address if the Juniper is in transparent mode. Can anyone tell me if this is wrong? I haven't been able to find a way to change it myself.
All interfaces are in use on each Juniper.
I think I have two options if I can't change the MAC address on one of the interfaces:
1) Change our failover/nsrp interface to e0/1 on one of the Junipers to make an interface with a differant MAC address available
2) Put a routing device between the two Junipers.
Cheers.
"There are 3 types of people in this world, those who can count and those who can't"
Comments
-
OptionsConstantlyLearning
Member Posts: 445
Looks like the issue is caused by both sides having an NSRP cluster which creates virtual MAC addresses for the interfaces using the formula from the below URL:
Juniper Networks - How is the virtual MAC address for a pair of Active/Passive firewalls derived? - Knowledge Base"There are 3 types of people in this world, those who can count and those who can't" -
OptionsConstantlyLearning
Member Posts: 445
Going to use a different interface on the remote firewall to resolve the MAC address issue."There are 3 types of people in this world, those who can count and those who can't"