Event ID - ASA-4-405002

Message CodeASA-4-405002
SeverityWarning
DescriptionReceived mac mismatch collision from IP_address/MAC_address for authenticated host
ExplanationThis packet appears for one of the following conditions:
  • The adaptive security appliance received a packet with the same IP address, but a different MAC address from one of its uauth entries.
  • You configured the vpnclient mac-exempt command on the adaptive security appliance, and the adaptive security appliance receives a packet with an exempt MAC address but a different IP address from the corresponding uauth entry.
User ActionThis traffic might be legitimate, or it might indicate that a spoofing attack is in progress. Check the source MAC address and IP address to determine where the packets are coming from and to see if they belong to a valid host.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh