cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7110
Views
5
Helpful
3
Replies

%RTD-1-ADDR_FLAP ...

sudermaniak
Level 1
Level 1

Hello,

recently I'm getting on a syslog server messages from one of my Cisco 3500 XL Switch.

It's about 15 - 20 such messages per day.

These messages are:

Message=<185>2093: 33w3d: %RTD-1-ADDR_FLAP: GigabitEthernet0/1 relearning 5 addrs per min

....

Message=<185>2093: 33w3d: %RTD-1-ADDR_FLAP: GigabitEthernet0/1 relearning 6 addrs per min

...

Message=<185>2093: 33w3d: %RTD-1-ADDR_FLAP: GigabitEthernet0/2 relearning 5 addrs per min


...

Both interfaces GigabitEthernet0/1 and GigabitEthernet0/2 are connected to other Cisco switches (0/1 - L3 switch, 0/2 - L2 switch).

I heard that it might be caused by a loop.

My question are:

What might cause such a loop ?

Do I have to really care about this or this is a quite normal behaviour ?

Thanks,

3 Replies 3

Leo Laohoo
Hall of Fame
Hall of Fame

I haven't seen this error message for a loooooooooong time! 

Is STP portfast enabled?  If yes, then disable it.

Error message means that the link is flapping.  Check the cable.  But in your case the error message is coming from both interface so I am suspecting that you do have a loop somewhere.  Make sure all uplink ports have STP disabled and access ports have BPDUGuard enable.

I had a client that had a core SWT showing similar error:

Oct 25 01:23:43: %RTD-1-ADDR_FLAP: FastEthernet0/1 relearning 39 addrs per min
Oct 25 01:24:43: %RTD-1-ADDR_FLAP: FastEthernet0/1 relearning 16 addrs per min
Oct 25 01:25:43: %RTD-1-ADDR_FLAP: FastEthernet0/1 relearning 22 addrs per min
Oct 25 01:26:43: %RTD-1-ADDR_FLAP: FastEthernet0/1 relearning 30 addrs per min
Oct 25 01:27:43: %RTD-1-ADDR_FLAP: FastEthernet0/1 relearning 20 addrs per min

There was a loop in the network. Two switches were connected to the core SWT and connected to each other. The SWT connected to each other was problematic. One end had Spanning Tree Port-fast enabled. The other seems to be in a default configuration ( very old SWT) and was not familiar with the CLI commands so spanning tree was enabled. I saw the logs showing the link between each other in forwarding state. The reliability was also very poor. I ended up shutting down the port and that resolved my trouble. Cleared the logs from Core SWT and no longer saw %RTD-1-ADDR_FLAP message. We originally thought it was a WAN issue but isolated to only one particular device.

Ganesh Hariharan
VIP Alumni
VIP Alumni

Hello,

recently I'm getting on a syslog server messages from one of my Cisco 3500 XL Switch.

It's about 15 - 20 such messages per day.

These messages are:

Message=<185>2093: 33w3d: %RTD-1-ADDR_FLAP: GigabitEthernet0/1 relearning 5 addrs per min

....

Message=<185>2093: 33w3d: %RTD-1-ADDR_FLAP: GigabitEthernet0/1 relearning 6 addrs per min

...

Message=<185>2093: 33w3d: %RTD-1-ADDR_FLAP: GigabitEthernet0/2 relearning 5 addrs per min


...

Both interfaces GigabitEthernet0/1 and GigabitEthernet0/2 are connected to other Cisco switches (0/1 - L3 switch, 0/2 - L2 switch).

I heard that it might be caused by a loop.

My question are:

What might cause such a loop ?

Do I have to really care about this or this is a quite normal behaviour ?

Thanks,

Hi,

Runtime Diagnostic (RTD) error messages can be defined in following ways

Error Message   RTD-1-ADDR_FLAP [chars] relearning [dec] addrs per min

Explanation   Normally, MAC addresses are learned once on a port. Occasionally, when a switched network reconfigures, due to either manual or STP reconfiguration, addresses learned on one port are relearned on a different port. However, if there is a port anywhere in the switched domain that is looped back to itself, addresses will jump back and forth between the real port and the port that is in the path to the looped back port. In this message, [chars] is the interface, and [dec] is the number of addresses being learnt.

Recommended Action   Determine the real path (port) to the MAC address. Use the debug ethernet-controller addr privileged EXEC command to see the alternate path-port on which the address is being learned. Go to the switch attached to that port. Note that the show cdp neighbors command is useful in determining the next switch. Repeat this procedure until the port is found that is receiving what it is transmitting, and remove that port from the network.

Error Message   RTD-1-LINK_FLAP [chars] link down/up [dec] times per min

Explanation   This message means that an excessive number of link down-up events has been noticed on this interface: [chars] is the interface, and [dec] is the number of times the link goes up and down. This might be the result of reconfiguring the port, or it might mean a faulty device at the other end of the connection.

Recommended Action   If someone is reconfiguring the interface or device at the other side of the interface, ignore this message. However, if no one is manipulating the interface or device at the other end of the interface, it is likely that the Ethernet transceiver at one end of the link is faulty and should be replaced.

Hope to Help !!

Ganesh.H

Remember to rate the helpful post

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco