Professional Documents
Culture Documents
If you have a big network with multiple Access Switches connecting to the core switches
or routers then tracing a device like a PC or a laptop for troubleshooting or security
purposes is one of those tasks that you often end up doing. This is not a difficult task but
can certainly be time consuming.
Lets start with an IP address on hand. If you have an IP address on hand quickly ping and
check if the device is pingable. If yes, then simply logon to one of your core switches or
routers and do a simple sh ip arp
From the above you know the MAC Address of for the device:
IP Address : 192.168.1.15
MAC Address : 0000.1111.1111
Now, do a show mac-address command on the core switch or router. This will show the
interface to which it is connected or through which it is learned.
This indicates that the device is either connected to the port or though another switch
which is connected to the interface. Looking at this, it is very likely that this is a uplink
(TenGigabit Ethernet link) to another Distribution or Access switch.
This shows the ports Te1/1 or Te2/1 as a source through which the address is learnt.
That tells you, it is the Access switch 1 that is connected to Te1/1 and not the device
itself.
Now, log onto the Access switch and do a "show mac-adddress-table" command for the
MAC address and that should show the interface to which it is connected
[NOTE: unless it is a distribution switch to again there are a bunch of Access switches
connected in which case, you need to go through the whole procedure as above again]
Access1# show mac-address-table 0000.1111.1111
As you can see which port the device is connected and on which switch.
There you go you found the device switchport that you tried to trace!!!