通过IP地址获取MAC地址及其对应的交换机端口

通过IP地址获取MAC地址及其对应的交换机端口而在思科交换机搭建的环境中，是能做到通过对方MAC/IP地址来查找对端对应的交换机端口的，具体步骤如下：假设对端的MAC地址为：192.168.1.101在中心交换机（核心层交换机或汇聚层交换机）上输入:switch-6509#showiparp|in192.168.1.101Internet192.168.50.4720011.2233.4455ARPAVlan50在ARP表中我们找到了和192.168.1.101对应的MAC地址，如果要根据MAC地址查找对应交换机端口，可从下面开始操作。switch-6509#showmacaddress-table|in0011.2233.4455MacAddressTable——————————————-VlanMacAddressTypePorts—-———–——–—–1200011.2233.4455DYNAMICGi1/0/3TotalMacAddressesforthiscriterion:1可以在MAC地址表中发现MAC地址0011.2233.4455是从端口G1/0/3学习过来的，继续向下层排查。switch-6509#showcdpneig1/0/3detailDeviceID:IDC-2960G48-A14-114Entryaddress(es):IPaddress:192.168.1.102Platform:ciscoWS-C2960G-48TC-L,Capabilities:SwitchIGMPInterface:GigabitEthernet1/0/3,PortID(outgoingport):GigabitEthernet0/48Holdtime:120secVersion:CiscoIOSSoftware,C2960Software(C2960-LANBASEK9-M),Version12.2(50)SE5,RELEASESOFTWARE(fc1)TechnicalSupport:(c)1986-2010byCiscoSystems,Inc.CompiledTue28-Sep-1013:44byprod_rel_teamadvertisementversion:2ProtocolHello:OUI=0x00000C,ProtocolID=0×0112;payloadlen=27,value=00000000FFFFFFFF010221FF000000000000B8BEBF549D00FF0000VTPManagementDomain:”NativeVLAN:1Duplex:fullManagementaddress(es):IPaddress:192.168.1.102我们发现下层连接的是2960的接入层交换机，登陆到此交换机。switch-2960#showmacaddress-table|in0011.2233.4455MacAddressTable——————————————-VlanMacAddressTypePorts—-———–——–—–1200011.2233.4455DYNAMICFa1/0/30TotalMacAddressesforthiscriterion:1即可发现该MAC/IP地址所对应的端口是2960交换机的f1/0/30口，若继续通过跳线追查可以发现该用户的具体位置。