HMC

 View Only
Expand all | Collapse all

How do I display the MAC address of the Adapters in a 7063-CR2

  • 1.  How do I display the MAC address of the Adapters in a 7063-CR2

    Posted Thu February 22, 2024 02:48 AM

    Please advise which commands do i run to display the Mac address of the adapters in a CR2 HMC-- needed to add to firewall rules

    Guidance much appreciated 



    ------------------------------
    Kishore Rampersad
    IBM South Africa
    Sandton
    ------------------------------


  • 2.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    Posted Fri February 23, 2024 01:15 AM

    Hi, I think the MAC address could be seen via BMC UI.

    https://www.ibm.com/support/pages/node/6483593



    ------------------------------
    Per Hillerström
    ------------------------------



  • 3.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    Posted Fri February 23, 2024 02:52 AM

    This should work in any supported HMC, physical and virtual as well:

    hscroot@hmc:~> cat /sys/class/net/eth*/address
    ac:1f:6b:c5:15:42
    ac:1f:6b:c5:15:43
    ac:1f:6b:c5:15:44
    ac:1f:6b:c5:15:45


    ------------------------------
    Lech Szychowski
    ------------------------------



  • 4.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    IBM Champion
    Posted Fri February 23, 2024 03:58 AM

    netstat -ei on the HMC command line will show you all interfaces, their IP and MAC addresses at once.

    if you use GUI, depending on your HMC version, you should choose HMC Management, then Network Settings, then LAN Adapters you will get the overview of network adapters and corresponding MAC addresses.



    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 5.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    IBM Champion
    Posted Fri February 23, 2024 07:43 AM

    And the cool thing is, the individual OS can override the MAC and assign it a new one.  Very useful in those instances where you replace a faulty card and your network consultant moves at a snail's pace.  For example, in IBM i it's quite easy to do 

    CHGLINETH LIND(LANLINSYS) ADPTADR(867530900000)

    Just ask Jenny.  ;-)



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------



  • 6.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    IBM Champion
    Posted Fri February 23, 2024 07:49 AM

    I'm also curious, assuming that the various OS's supported on the platform didn't override the mac address (as shown above) how do the suggested HMC commands handle MAC addresses returned by link aggregation, etc?



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------



  • 7.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    Posted Fri February 23, 2024 08:03 AM

    Aggregations are seen as network interfaces/devices and usually inherit layer 2 address from one of the aggregation memebers. Generally there should be no problem, all mentioned commands should return the actual addresses.



    ------------------------------
    Lech Szychowski
    ------------------------------



  • 8.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    IBM Champion
    Posted Fri February 23, 2024 08:36 AM

    How about this situation then?

    I have two multiport ethernet cards.  Card one is supported by VIOSLPAR1.  Card two is supported by VIOSLPAR2.  Port 1 of card 1 goes to switch1.  Port 2 of card 1 goes to switch2.  Port 1 of card 2 goes to switch1.  Port 2 of card 2 goes to switch2.  All of this appears as one line to 5 lpars of IBM i hosted by those VIOS lpars.  This gives each lpar redundancy in case of a switch failure, card failure or maintenance on a lpar of vios.

    What mac address(es) does the network guy see?

    Oh, and one of those lpars is in the DMZ and supports our external facing websites.  The other lpars are for internal use only.

    Actual situation.



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------



  • 9.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    Posted Fri February 23, 2024 09:32 AM
    Edited by Lech Szychowski Fri February 23, 2024 09:33 AM

    > Card one is supported by VIOSLPAR1.

    > Card two is supported by VIOSLPAR2.

    > Port 1 of card 1 goes to switch1.  Port 2 of card 1 goes to switch2.

    > Port 1 of card 2 goes to switch1.  Port 2 of card 2 goes to switch2. 

    All these four are not aggregated on VIO level, right? If aggregation is created on IBMi system in client LPAR level then further questions should be directed to IBMi admin. 

    Please remenber that multiple SEA in redundant/loadshared mode are not one aggregation from the netwok PoV.

    > All of this appears as one line to 5 lpars of IBM i hosted by those VIOS lpars. 

    OK, so now it seems it is indeed a case of two SEAs (one in each VIOS) in redundant/loadshared mode. So what is the actual config?

    > What mac address(es) does the network guy see?

    Well, I am pretty sure that each virtual network interface in each IBMi system has its own MAC (unique in your env, or at least in the broadcast domain), so witch client LPARs it's easy.

    And - last but not least - are we still talking about HMC console? ;)

    ------------------------------
    Lech Szychowski
    ------------------------------



  • 10.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    IBM Champion
    Posted Mon February 26, 2024 10:41 AM

    The SEA uses the MAC of the aggregate which is the MAC of the first card of the aggregate (Unless you specify an LAA for the aggregate).
    From the switch side, they'll see this MAC on all the ports of the aggregate, with the exception of backup adapters.

    The LPARs show up with their own MACs, on the aggregate ports selected by the VIOS.



    ------------------------------
    José Pina Coelho
    IT Specialist at Kyndryl
    ------------------------------



  • 11.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    IBM Champion
    Posted Mon February 26, 2024 10:51 AM

    My point was not a question as to how to do this for my situation.  It was more of a "I'm not sure the suggestions others have given you as to how to determine the mac address that the network guy is trying to use may work for your situation."  YMMV

    From the original post "...display the Mac address of the adapters in a CR2 HMC-- needed to add to firewall rules"



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------



  • 12.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    Posted Tue February 27, 2024 03:22 AM

    > how to determine the mac address that the network guy is trying to use

    Traffic filtering guys most often care aboult L3 addresses, not L2 ones. That's why I am quite sceptical whether OP really meant "firewalling based upon MAC addres". I'd say that, yes, network guys may have switch configuration policy that requires filtering MACs allowed on a particular switch port.

    In your example even if you do care about the L2 addreses it's most often the client LPAR interface addresesses you are interested in, not the SEA/aggregation ones. In most cases people do not have L3 configured on the SEA (or the aggregation) itself - it would work, but usually it's not the optimal solution.

    If you want the answer to your question "What mac address(es) does the network guy see?" first. you have to specify what traffic are you interested in: originating in client LPAR ior originating in VIOS?



    ------------------------------
    Lech Szychowski
    ------------------------------



  • 13.  RE: How do I display the MAC address of the Adapters in a 7063-CR2

    Posted Fri February 23, 2024 09:17 AM

    the HMC is linux so a google search turned up

    • cat /sys/class/net/*/address

      does that work?


    ------------------------------
    Bryan Dietz
    ------------------------------