Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Deep Security Agent (DSA) fails to function properly if "Teamed NICs" have the same MAC address

    • Updated:
    • 4 Sep 2014
    • Product/Version:
    • Deep Security 9.0
    • Deep Security 9.5
    • Platform:
    • Unix - Solaris (Sun) version 10 (SunOS 5.10)
Summary
The IPMP failover (active-standby) mode in Solaris allows two Network Interface Cards (NICs) to have the same hardware (MAC) address. The Deep Security Agent (DSA) identifies adapters by their MAC address. This duplication prevents the Agent from functioning properly.
Details
Public
To resolve the issue, manually assign unique MAC addresses to each adapter.
Sample output:
# ifconfig -a
hme0: flags=1000843 <BROADCAST,RUNNING,MULTICAST,IPV4> mtu 1500 index 2
inet 10.20.30.40 netmask 0
ether 8:0:20:f7:c3:f
hme1: flags=1000842 <BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 8
inet 0.0.0.0 netmask 0
ether 8:0:20:f7:c3:f
The "ether" line displays the adapter's MAC address. If any interfaces are showing identical MAC addresses and connected to the same subnet, new unique MAC addresses must be set manually.
Run the following command:
# ifconfig <interface> ether <new MAC address>
Although the chance of a MAC address conflict is extremely small, you should verify that there none by using the snoop command to search for the chosen MAC address. Then use the ping command to test connection to the broadcast address of the subnet.
Note: On Solaris systems with multiple interfaces on the same subnet, the operating system may route packets through any of the interfaces. Because of this, any Firewall Stateful Configuration options or Intrusion Prevention Rules should be applied to all interfaces equally.
Premium
Internal
Rating:
Category:
Troubleshoot; Install
Solution Id:
1104660
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.