cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
698
Views
5
Helpful
6
Replies

HOST in Vlan Flapping

cisco.net
Level 1
Level 1

Hello freinds,

Getting some messages from 4500 series L3 swithc about Vlan flapping.

SEQ HOST FACILITY DATE TIME PROGRAM MESSAGE

41542 10.100.9.10 local7 12:13:15 Syslog %C4K_EBM-4-HOSTFLAPPING: Host 00:15:C6:0D:08:FF in vlan 111 is flapping between port Gi1/1 and port Gi3/4

41541 10.100.9.10 local7 12:12:59 Syslog %C4K_EBM-4-HOSTFLAPPING: Host 00:15:C6:0D:08:FF in vlan 111 is flapping between port Gi1/1 and port Gi3/4

41540 10.100.9.10 local7 12:12:16 Syslog %C4K_EBM-4-HOSTFLAPPING: Host 00:15:C6:0D:08:FF in vlan 111 is flapping between port Gi1/1 and port Gi3/4

41539 10.100.9.10 local7 12:12:06 Syslog %C4K_EBM-4-HOSTFLAPPING: Host 00:15:C6:0D:08:FF in vlan 111 is flapping between port Gi1/1 and port Gi3/4

41538 10.100.9.10 local7 12:11:44 Syslog %C4K_EBM-4-HOSTFLAPPING: Host 00:15:C6:0D:08:FF in vlan 111 is flapping between port Gi1/1 and port Gi3/4

41537 10.100.9.10 local7 12:11:17 Syslog %C4K_EBM-4-HOSTFLAPPING: Host 00:15:C6:0D:08:FF in vlan 111 is flapping between port Gi1/1 and port Gi3/4

Please suggest.

Regards

Regards

6 Replies 6

crow930us
Level 3
Level 3

You might have a spanning tree loop. Host 00:15:C6:0D:08:FF in vlan 111 is detected as a source address on ports Gi1/1 and port Gi3/4. Typically a host is supposed to be learned on only one port. All traffic from the specified

host is temporarily dropped. After 15 seconds, forwarding is reenabled.

If spanning tree is disabled make sure there are no spanning tree loop in your network.

Hii,

While tracing the mentioned MAC address we finding the the same belongs to Vlan 111 logical interface.

Cisco_Sw1#sh int vlan 111

Vlan111 is up, line protocol is up

Hardware is Ethernet SVI, address is 0015.c60d.08ff (bia 0015.c60d.08ff)

Regards

Hello Jimmy,

there is a loop and the switch is complaining of seeing its own packets received back on your ports.

For example these could be HSRP hello messages sent with a source MAC = SVI MAC address.

verify what is connected on those two ports.

I would also try to shut down one of them.

Hope to help

Giuseppe

Hello Giuseppe,

Gig1/1 of the switch is UPLINK/Trunk port (connected to core/agg cisco L3 switch) and Gi3/4 is the access port with Vlan 111 from where one ethernet connectivity is extended.

As for as HSRP is concerned ..the same is not running anywhere on the switches.

regards

Dear All,

Can anyone have some suggestions for finding out the problem.

regards

Hi ,

Make sure that both the switches are transperant as per vtp mode...

do clear arp on both the swiches and check the logs...

Clear mac-address table also...if you do this both the swithces forms mac table freshly and most of the time problem of host falpping is been resolved by clear mac-addresses.

Hope it resolves your issue.

Thanks,

Satish

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: