00:00:00:00:00:00 as MAC address in authentication session

[umahar]

Hi,

We are seeing huge number logs on ISE coming from MAC address 00:00:00:00:00:00 from different switches

The show authentication session output from the switch is shown below

The interface is configured with multi-auth and the phones and machines are working properly in DATA and VOICE domain.

Has anyone observed these logs before ?

What could be source of these requests ?

I do not see any such entry in the mac address table from that interface

[Timothy Abbott · Accepted solution]

Hi,

What is the switch platform and code version you are using?

Regards,

-Tim

[umahar]

Hi,

I am seeing this issue in Cat 6500 SUP 32 running 12.2(33)SXJ10.

[umahar]

Hi

CAT 6500 SUP 32 is end of maintenance so cannot upgrade further.

We are opening a TAC case for it

[Timothy Abbott]

Hi,

TAC will be able to verify if this is a defect in the code of the Sup32 but like you said, given the software is end of maintenance, you won't be able to upgrade.

Regards,

-Tim