MAC Source Address

[deanwebb]

I know this is a big deal in the CCNA courseware, but how often do we use the fact that the MAC source address can change when we do packet captures? I typically only look at MAC addresses on captures from that source and then use IP addresses for all other captures.

How often do you have to remember how MAC addresses can change or when/where they get flooded? I'm genuinely curious if it's just because I'm in security, or if it's a topic that really doesn't deserve to have all that much attention placed on it.

[icecream-guy]

MAC address is only relevant to the local segment, otherwise it's all IP's.

[deanwebb]

MAC address is only relevant to the local segment, otherwise it's all IP's.

That's what I thought. It's one of those "how do I use this in real life?" topics where the answer is, "Your CCIE practical, that's where!"