I have configured Cisco ASA 5585-x with Active/Standby mode, cisco best practice saying you should use Virtual MAC address on interface to avoid traffic disruption when you do failover. now question is what MAC address i should use so it won't conflict with any other device in datacenter can i use aaa.aaa.aaa.aaa , bbbb.bbbb.bbbb.bbbb OR can i use Burn-in MAC address of physical interface as virtual Mac so i don't need to worry about any kind of conflict (I didn't find in cisco guide saying you can use Read Burn-in MAC address as virtual so wanted to make sure what other people doing here?)

I have Port-channel configured on cisco ASA so do i need to configure Virtual MAC address on port-channel interface also or just VLAN interface like PortChannel1.10 ?

  • Have you already seen the discussion about this at community.cisco.com/t5/network-security/… ?
    – Jesse P.
    Oct 5 '20 at 0:28
  • 1
    I haven't but now i can see it, i got confused when i saw accepted answer is "You can't do it" but last post saying you can with failover mac command so look like i can use burn-in MAC address as a virtual MAC address :) but now question is how to deal with PortChannel interface because they have same MAC address for all VLANs
    – Satish
    Oct 5 '20 at 3:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.