cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
260
Views
0
Helpful
3
Replies

L2 & L3 Port Behaviour

cisco.net
Level 1
Level 1

Hi Freindz,

I have two cisco 4507 switches. One connectivity between switches is L3 and another by L2.

While we are checking the ARP on the destination switch. Then L3 port also reflecting BASE MAC-Address like L2 port, But i guess it should only reflect the ARP address of own Mac-address. Why this is happening. Can anyone clear this pls.

regards

3 Replies 3

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Jimmy,

may you provide show arp examples of what you are seeing ?

the arp table should point to the SVI for the L2 port and to the routed port for the L3 port.

Hope to help

Giuseppe

Hii Giuseppe ,

We are getting this messages on our syslog.

06/09/2009 18:56:49 IST [dosProtection__] dosProtection: Flow is suspicious: GigabitEthernet4/0 for control protocol: IP TTL Expired source MAC 0017.0e1c.f33f with rate 65 pps

06/09/2009 18:56:34 IST [dosProtection__] dosProtection: Flow is suspicious: GigabitEthernet2/1 for control protocol: IP TTL Expired source MAC 0017.0e1c.f33f with rate 45 pps

06/09/2009 18:55:58 IST [dosProtection__] dosProtection: Flow is suspicious: GigabitEthernet2/1 for control protocol: IP TTL Expired source MAC 0017.0e1c.f33f with rate 75 pps

06/09/2009 18:51:48 IST [dosProtection__] dosProtection: Flow is suspicious: GigabitEthernet4/0 for control protocol: IP TTL Expired source MAC 0017.0e1c.f33f with rate 74 pps

06/09/2009 18:50:29 IST [dosProtection__] dosProtection: Flow is suspicious: GigabitEthernet2/1 for control protocol: IP TTL Expired source MAC 0017.0e1c.f33f with rate 40 pps

06/09/2009 18:46:44 IST [dosProtection__] dosProtection: Flow is suspicious: GigabitEthernet4/0 for control protocol: IP TTL Expired source MAC 0017.0e1c.f33f with rate 58 pps

06/09/2009 18:44:56 IST [dosProtection__] dosProtection: Flow is suspicious: GigabitEthernet2/1 for control protocol: IP TTL Expired source MAC 0017.0e1c.f33f with rate 105 pps

06/09/2009 18:41:33 IST [dosProtection__] dosProtection: Flow is suspicious: GigabitEthernet4/0 for control protocol: IP TTL Expired source MAC 0017.0e1c.f33f with rate 72 pps

Hello ,

Pls asnyone revert...

Revert.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco