cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
285
Views
0
Helpful
5
Replies

I have 2 ports on a distro 3750 that trip every Sunday from an MAC that resolves to our core switch. (non cisco)

kevin.clark
Level 1
Level 1

I have 2 ports on a Cisco 3750 distro switch that are put in an err-disabled state every Sunday. The error is 'security violation occurred, caused by MAC address XXXX. This MAC address is associated with our Juniper core switch, showing up in spanning tree associated to all the layer 3 aggregate ports.

5 Replies 5

johnd2310
Level 8
Level 8

Hi,

 

What event is happening at that time? Is there a switch config backup at that time?

 

Thanks

John

**Please rate posts you find helpful**

John, that was our original thought, but the backups don't run at that time and no other network event happens. thank you

what is plugged into the 2 ports that are going down?

do you have port security, or arp inspection turned on?

The 2 ports are connected to user workstations. Port security is active on each port, arp inspection is not.

kevin.clark
Level 1
Level 1

just to give an update. we have noticed that there are other ports on other switches being effected, however, not on a consistant basis. same MAC address, same outcome.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco