Equipment Support > Hardware By Brand > Cisco > [CCNA] How to show specific mac address in a switch table ?

[CCNA] How to show specific mac address in a switch table ?

The commands are different on different switches. Some are "show mac address-table" while others are "show mac-address-table". You have to either know by model of switch or just try both.

LAX-C2970-A#show mac address-table ?
  address       Address to lookup in the table
  aging-time    MAC address table aging parameters
  count         Number of MAC addresses in the table
  dynamic       List dynamic MAC addresses
  interface     List MAC adresses on a specific interface
  move          MAC Move information
  multicast     List multicast MAC addresses
  notification  MAC notification parameters and history table
  secure        List secure MAC addresses
  static        List static MAC addresses
  vlan          List MAC addresses on a specific vlan
  |             Output modifiers
  <cr>
 
LAX-C2970-A#show mac address-table address ?
  H.H.H  48 bit mac address
 

LAX-C2970-A#show mac address-table         
          Mac Address Table
-------------------------------------------
Vlan    Mac Address       Type        Ports
----    -----------       --------    -----
 All    0100.0ccc.cccc    STATIC      CPU
 All    0100.0ccc.cccd    STATIC      CPU
 All    0180.c200.0000    STATIC      CPU
 All    0180.c200.0001    STATIC      CPU
 All    0180.c200.0002    STATIC      CPU
 All    0180.c200.0003    STATIC      CPU
 All    0180.c200.0004    STATIC      CPU
 All    0180.c200.0005    STATIC      CPU
 All    0180.c200.0006    STATIC      CPU
 All    0180.c200.0007    STATIC      CPU
 All    0180.c200.0008    STATIC      CPU
 All    0180.c200.0009    STATIC      CPU
 All    0180.c200.000a    STATIC      CPU
 All    0180.c200.000b    STATIC      CPU
 All    0180.c200.000c    STATIC      CPU
 All    0180.c200.000d    STATIC      CPU
 All    0180.c200.000e    STATIC      CPU
 All    0180.c200.000f    STATIC      CPU
 All    0180.c200.0010    STATIC      CPU
 All    ffff.ffff.ffff    STATIC      CPU
  10    0004.961f.4b84    DYNAMIC     Gi0/25
  10    0009.4455.bc0a    DYNAMIC     Gi0/25
  10    000c.2909.549e    DYNAMIC     Gi0/1
  10    000c.292c.96b8    DYNAMIC     Gi0/1
  10    000c.297b.1474    DYNAMIC     Gi0/1
  10    000c.29bf.7aa0    DYNAMIC     Gi0/1
  10    000c.76e9.529f    DYNAMIC     Gi0/25
  10    000d.8759.b022    DYNAMIC     Gi0/25
  10    000e.84cd.7800    DYNAMIC     Gi0/19
  10    000e.84cd.7801    DYNAMIC     Gi0/20
  10    0011.2fae.a53d    DYNAMIC     Gi0/25
  10    0011.d83f.d52c    DYNAMIC     Gi0/25
  10    0011.d83f.d53a    DYNAMIC     Gi0/25
  10    0011.d83f.d54c    DYNAMIC     Gi0/25
  10    0011.d83f.d55a    DYNAMIC     Gi0/25
  10    0011.d83f.d564    DYNAMIC     Gi0/25
  10    0013.d3ec.666f    DYNAMIC     Gi0/25
  10    0013.d3ec.66f3    DYNAMIC     Gi0/25
  10    0013.d3ee.2666    DYNAMIC     Gi0/25
  10    0013.d404.e476    DYNAMIC     Gi0/25
  10    0014.220e.5a7d    DYNAMIC     Gi0/25
  10    0014.220e.5a7f    DYNAMIC     Gi0/25
  10    0015.1798.5042    DYNAMIC     Gi0/1
  10    0015.c5f2.938d    DYNAMIC     Gi0/25
  10    0021.9b8c.7142    DYNAMIC     Gi0/25
  10    0025.9000.0e3a    DYNAMIC     Gi0/25
  10    0025.9000.dc77    DYNAMIC     Gi0/25
  10    0025.9003.98f8    DYNAMIC     Gi0/25
  10    0025.9003.ad5e    DYNAMIC     Gi0/25
  10    0025.9033.62f4    DYNAMIC     Gi0/25
  10    0025.9033.62f5    DYNAMIC     Gi0/25
  10    0025.9037.6548    DYNAMIC     Gi0/25
  10    0025.9037.6549    DYNAMIC     Gi0/25
  10    0025.903d.cc2f    DYNAMIC     Gi0/25
  10    0025.903e.bbed    DYNAMIC     Gi0/25
  10    0030.48f1.3539    DYNAMIC     Gi0/25
  10    0030.48f1.8b20    DYNAMIC     Gi0/25
  10    0050.564c.4a09    DYNAMIC     Gi0/15
  10    0050.5679.5ffc    DYNAMIC     Gi0/15
  10    0050.56b0.0749    DYNAMIC     Gi0/1
  10    0050.56b0.5f14    DYNAMIC     Gi0/1
  10    0050.56b0.6d8f    DYNAMIC     Gi0/1
  10    0050.56ba.885b    DYNAMIC     Gi0/1
  10    0050.56ba.885c    DYNAMIC     Gi0/1
  10    00e0.52eb.8dc6    DYNAMIC     Gi0/25
  10    0254.0011.9342    DYNAMIC     Gi0/25
  10    0254.0012.e742    DYNAMIC     Gi0/25
  10    0254.001a.e65c    DYNAMIC     Gi0/25
  10    0254.0033.663a    DYNAMIC     Gi0/25
  10    0254.003c.fa14    DYNAMIC     Gi0/25
  10    0254.003d.de30    DYNAMIC     Gi0/25
  10    0254.004b.dd56    DYNAMIC     Gi0/25
  10    0254.005c.532e    DYNAMIC     Gi0/25
  10    0254.0076.966e    DYNAMIC     Gi0/25
  10    0254.008c.259e    DYNAMIC     Gi0/25
  10    0254.00ae.d67e    DYNAMIC     Gi0/25
  10    0254.00cb.792e    DYNAMIC     Gi0/25
  10    0254.00e4.c54c    DYNAMIC     Gi0/25
  10    5254.0029.4349    DYNAMIC     Gi0/25
  10    5254.0057.7c57    DYNAMIC     Gi0/25
  10    5254.00e9.d767    DYNAMIC     Gi0/25
  10    5254.00ed.9283    DYNAMIC     Gi0/25
  10    6c62.6da7.e57d    DYNAMIC     Gi0/25
   1    000e.84cd.7800    DYNAMIC     Gi0/19
   1    000e.84cd.7801    DYNAMIC     Gi0/20
   1    0030.4885.99f2    DYNAMIC     Gi0/13
   1    0050.567c.8f8b    DYNAMIC     Gi0/14
Total Mac Addresses for this criterion: 87
 

LAX-C2970-A#show mac address-table address 0254.008c.259e
          Mac Address Table
-------------------------------------------
 
Vlan    Mac Address       Type        Ports
----    -----------       --------    -----
  10    0254.008c.259e    DYNAMIC     Gi0/25
Total Mac Addresses for this criterion: 1
LAX-C2970-A#
 

The switch is a 2960, what would the command be ??

Try:

#sh mac-address-table | inc 00D0.FF66.AA18

If that's not what you're looking for, maybe explaining what you're looking to accomplish would help get you an answer or better suggestion of what to try.

reply to JDmailNY
actually the correct command is:

sh mac- dy | i AA18

reply to JDmailNY
I can only get IOS 12.2 on a 2960 to support these:

sh mac address-table dyn
sh mac address-table sta
 

lol... yeah @ 1AM I do get a typos once in a while...

it is:

sh mac add dy | i AA18

reply to JDmailNY
Always handy "show mac?" just to see what options you got, then keep building on that.
For the life of me, can't see why Cisco did both "show mac address-table" and "show
mac-address-table," then decided to orphan one of them in the later switch IOS releases.

Regards

reply to JDmailNY
The IOS show mac address-table address [PC MAC Address] command shows the MAC address owner in question connects to specific switch port. Note that the switch port can be access or trunk port. If the switch port is access port, then the PC is likely to connect directly to the switch. If the switch port is trunk port, then the PC is likely to connect to the other end of trunk.

There are some cases where the PC may not directly connect to the switch even though from the show command, the PC connects to an access port. One possibility is that there is a unmanaged switch in between. When you see multiple MAC addresses connect to the same access port, then this is good indication of having such unmanaged switch between the PC and the Cisco switch.

reply to JDmailNY
You may notice that the show mac address-table address command is to reveal which switch port specific machine connects to based on the machine's MAC address. If you want to know which machine connect to specific switch port, then the show mac address-table interface command is your friend, which will reveal the machine's MAC address.

In some places, you may not be able to tell which machine has such MAC address. You could however tell which company manufactured the machine by checking the MAC address against vendor's MAC address database. Do a Google search to find a link that have such database.

One way to tell which machine has such MAC address is by checking its associated IP address. To find out the associated IP address, simply check ARP table of the machine's gateway. Once you have the IP address, you may run nslookup, check your DNS server, or check your IP address assignment database.

There are certain cases that some MAC addresses do not associate with any IP address at all, which may indicate some proprietary heartbeat mechanism. Even some heartbeat mechanism may not use MAC address at all, although they do need a broadcast domain to be able to see each other.

I think the problem in my case is more related to packet tracer 5.3 not having the mac-address-command I need. I have run into a few inconsistancies with some of the lab books, and I bet thats just what this really is. Thanks Everyone

Another reason why you cant beat the real deal for a lab.

And yes, Cisco switching the command caught me out too. Hate to think how many tools that relied on the CLI and havent or cant be updated are now broken because of that ...

As I go on in my studies , I found another problem with the lab books order of executing trunking. As I mentione to you before thanks for pointing me in the right direction and I am going to learn Linux. I feel so left out. I have been doing MS win for so long I think its time to learn a skill.