MAC Address flapping in Core switch

smartboy2255 · ‎12-29-2010

GM all,

I am getting following error in Cisco 6509 switch.BUt there is no impact in the switch.

: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 694 is flapping between port Te8/1 and port Te7/1

29:33.959: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 269 is flapping between port Te7/1 and port Te8/1

29:33.959: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 460 is flapping between port Te7/1 and port Te8/1

29:33.959: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac0a in vlan 18 is flapping between port Te7/1 and port Te8/1

29:33.959: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 548 is flapping between port Te8/1 and port Te7/1

29:33.959: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 565 is flapping between port Te8/1 and port Te7/1

29:33.959: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 469 is flapping between port Te8/1 and port Te7/1

29:33.959: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 176 is flapping between port Te8/1 and port Te7/1

29:33.959: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 146 is flapping between port Te8/1 and port Te7/1

29:33.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 460 is flapping between port Te7/1 and port Te8/1

29:33.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 378 is flapping between port Te7/1 and port Te8/1

29:33.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 488 is flapping between port Te7/1 and port Te8/1

29:33.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 289 is flapping between port Te7/1 and port Te8/1

29:33.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 883 is flapping between port Te7/1 and port Te8/1

29:33.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 540 is flapping between port Te8/1 and port Te7/1

29:33.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 460 is flapping between port Te7/1 and port Te8/1

29:33.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 587 is flapping between port Te8/1 and port Te7/1

29:33.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 884 is flapping between port Te7/1 and port Te8/1

29:50.079: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 198.168.10.5

29:50.183: %PM_SCP-SP-4-LCP_FW_ABLC: Late collision message from module 3, port:012

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 378 is flapping between port Te7/1 and port Te8/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 488 is flapping between port Te7/1 and port Te8/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 548 is flapping between port Te7/1 and port Te8/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 883 is flapping between port Te7/1 and port Te8/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 460 is flapping between port Te7/1 and port Te8/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 289 is flapping between port Te7/1 and port Te8/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 540 is flapping between port Te8/1 and port Te7/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 884 is flapping between port Te7/1 and port Te8/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 587 is flapping between port Te8/1 and port Te7/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 694 is flapping between port Te8/1 and port Te7/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 269 is flapping between port Te7/1 and port Te8/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac64 in vlan 996 is flapping between port Te8/1 and port Te7/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac0a in vlan 18 is flapping between port Te7/1 and port Te8/1

30:08.963: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 460 is flapping between port Te7/1 and port Te8/1

What could be the problem.MAC address is of HSRP MAC address

Rgds,

Anish

Leo Laohoo · ‎12-29-2010

Sounds like HSRP is not configured correctly. If you take out the HSRP config does the error messages stop?

Souvik Ghosh · ‎12-29-2010

Hi Anish,

There is a loop in your network. The HSRP hellos are getting looped and coming back to the same switch. Here is what we do to troubleshoot the problem ( lill complicated , i will try to make as much sense as possible )

-> check whether te7/1 and te8/1 is supposed to be in an ehterchannel.

-> if yes check whether they are bundled properly or not.

sh etherch summ is the comm you would like to check.

if they are in port-channel both the ports should show status "P".

Same test need to be done on the device where the port-channel terminates

If they are not bundled properly do a shut/no shut on the port-channel interface and also on the physical interfaces ( provided the configuration is fine )

-> if te7/1 and te8/1 are not in port-channel, forget about multiple vlans in the log, just pick one mac address and check from which interface it is supposed to learn.

e.g 0000.0c07.ac01 for vlan 269 , the switch is suppos to learn on Te7/1, then go to the next device conencted across te8/1 ( this is not a typo, you need to track the path from which the switch is NOT supposed to learn the mac-add ).

-> hop on to the next device and check for similar log messages.sometimes you need to enable mac-flap notification as well ( this is not enabled by default on 6500 ). command to enable mac-flap is switch(config)# mac-add notifica mac-move.

-> stop once you get an access port the mac-add is flapping. shut doown the port or check the device ( may be a hub or a physical loop ) which is connected to that access port.

If this does not solve the problem please open a TAC case and provide me the SR no, and i will work on this.

Rgds,

Souvik

miguel.sanchez1 · ‎06-24-2015

I had same issue. I found and traced host, similarly to what Souvik mentioned. I found a VoIP Cisco phone 7961 in which the user plugged in from the 'SW' port and the 'PC' port to our network. That in essence created a loop and the local switch had BPDU blocking that port as well.

Jun 24 08:35:16: %PM-4-ERR_DISABLE: bpduguard error detected on Gi4/6, putting Gi4/6 in err-disable state
Jun 24 08:35:16: %SWITCH_QOS_TB-5-TRUST_DEVICE_DETECTED: cisco-phone detected on port Gi5/42, port's configured trust state is now operational.
Jun 24 08:35:46: %PM-4-ERR_RECOVER: Attempting to recover from bpduguard err-disable state on Gi4/6
Jun 24 08:35:55: %SPANTREE-2-BLOCK_BPDUGUARD: Received BPDU on port Gi5/42 with BPDU Guard enabled. Disabling port.
Jun 24 08:35:55: %PM-4-ERR_DISABLE: bpduguard error detected on Gi5/42, putting Gi5/42 in err-disable state
Jun 24 08:36:00: %SWITCH_QOS_TB-5-TRUST_DEVICE_LOST: cisco-phone no longer detected on port Gi5/42, operational port trust state is now untrusted.
Jun 24 08:36:25: %PM-4-ERR_RECOVER: Attempting to recover from bpduguard err-disable state on Gi5/42
Jun 24 08:36:44: %SPANTREE-2-BLOCK_BPDUGUARD: Received BPDU on port Gi4/6 with BPDU Guard enabled. Disabling port.