Reset Search
 

 

Article

Why is the K-Series MAC address the source of Port 137 traffic Logged on the Firewall?

« Go Back

Information

 
TitleWhy is the K-Series MAC address the source of Port 137 traffic Logged on the Firewall?
Question
Why is the routers MAC address the source of port 137 traffic logged by the firewall?
Environment
  • 7100-Series
  • K-Series
  • S-Series
Answer
Routers rebuild the Ethernet frame when routing between VLANs and replace the source MAC of the client with the MAC of the interface facing the firewall.  Traffic routed from inside the network will be sent to the firewall with the router's MAC address. 
Port 137 is used for NetBIOS,but the behavior is the same for all routed traffic regardless of the port used. 
Additional notes
Use the following article to debug the source of the traffic:
How to Debug Specific traffic on N-Series,S-Series,K-Series and 7100-Series

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255