Discover the device connected to a Layer 3 Cisco Switch Port using MAC Address to IP Address Mapping

Written by James McDonald

July 30, 2013

You need to ping the device from the switch so you can populate the switches arp cache with the IP/Mac mapping.

From there you can then find the port

# firstly on the cisco switch you need to ping the IP address of the device

ping 192.168.0.6
Sending 5, 100-byte ICMP Echos to 192.168.0.70, timeout is 2 seconds:

!!!!!

# you can grab the mac address connected to a cisco switch port

switch01#show mac-address-table | include Gi0/6
   1    d4be.d9fb.8630    DYNAMIC     Gi0/6

# and get the IP Address of the connected device
switch01#show ip arp | include d4be.d9fb.8630
Internet  192.168.0.6             0   d4be.d9fb.8630  ARPA   Vlan1

This may only work if the host you are trying to track down is doing inter-subnet communications.

You may need to do a ping or nmap -sP subnet/subnet_mask to populate the mac-address-table on the switch.

YMMV

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

The reCAPTCHA verification period has expired. Please reload the page.

You May Also Like…

Network speed test host to host

On Ubuntu / Debian apt-get install iperf3 On Windows download it from https://iperf.fr/iperf-download.php#windows Make...

Clear HSTS Settings in CHrome

Open chrome://net-internals/#hsts enter the domain in the query field and click Query to confirm it has HSTS settings...