Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

MAC Flap Notifications from Wireless Clients

Hello everyone!

I'm getting MAC flap notifications from 2 switches at our remote office from the same two switches (switch 2 & 6).  There are a total of 7 switches (5 on the first floor & 2 on the second floor).  Each switch connects to the root bridge with no redundant links.  There are 4 access points that are autonomous with two SSIDs; 2 of the APs are connected to switch 2 (1st floor) and the remaining two are connected to switch 6 (second floor).  The switchport configuration is as follows which is the same at our main campus:

interface GigabitEthernet1/0/1

description *** WIRELESS ACCESS POINT ***

switchport mode trunk

switchport nonegotiate

speed 100

duplex full

macro description cisco-wireless

spanning-tree bpduguard enable

end

At the main campus we have a 5508 WLC with 85 LAPs and we don't have this issue.  My assumption at this point has to do with roaming since our therapists have to move between both floors.  What's even strange is that I can't find the mac (0013.0210.5344) of the device causing the flaps when I run the command 'show dot11 assoc' from my APs.  All I know based off the MAC is that it's an Intel WNIC.  Here is the config of one of the APs at the remote office.  How can I get to the bottom of resolving these MAC flapping notifications?

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname pag1ap01

!

!

aaa new-model

!

!

aaa authentication login default local

aaa authorization exec default local

!

aaa session-id common

clock timezone -0500 -5

clock summer-time -0400 recurring

ip domain name <DOMAIN>

ip name-server <DNS IP>

ip name-server <DNS IP>

!

!

dot11 vlan-name default vlan 1

dot11 vlan-name dsl vlan 6

!

dot11 ssid pathwaysaironet

   vlan 1

   authentication open

!

dot11 ssid patnet

   vlan 6

   authentication open

   guest-mode

!

dot11 network-map

power inline negotiation injector 001a.6c7c.4882

power inline negotiation prestandard source

!

!

!

!

bridge irb

!

!

interface Dot11Radio0

no ip address

no ip route-cache

!

encryption vlan 6 key 1 size 40bit <KEY> transmit-key

encryption vlan 6 mode wep mandatory

!

encryption vlan 1 key 1 size 128bit <KEY> transmit-key

encryption vlan 1 mode wep mandatory

!

ssid pathwaysaironet

!

ssid patnet

!

speed  basic-1.0 basic-2.0 basic-5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0

station-role root

!

interface Dot11Radio0.1

encapsulation dot1Q 1 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

!

interface Dot11Radio0.6

encapsulation dot1Q 6

no ip route-cache

bridge-group 6

bridge-group 6 subscriber-loop-control

bridge-group 6 block-unknown-source

no bridge-group 6 source-learning

no bridge-group 6 unicast-flooding

bridge-group 6 spanning-disabled

!

interface FastEthernet0

no ip address

no ip route-cache

speed 100

full-duplex

!

interface FastEthernet0.1

encapsulation dot1Q 1 native

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

!

interface FastEthernet0.6

encapsulation dot1Q 6

no ip route-cache

bridge-group 6

no bridge-group 6 source-learning

bridge-group 6 spanning-disabled

!

interface BVI1

ip address <IP ADDRESS> <MASK>

no ip route-cache

!

ip default-gateway <GATEWAY IP>

ip http server

ip http authentication aaa

no ip http secure-server

ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag

snmp-server community snmpsux RO

bridge 1 route ip

!

!

!

line con 0

line vty 0 4

!

sntp server <SNTP IP>

sntp broadcast client

end

Yes, we're not using the most secure encryption on the wireless and that'll be changed but I need to resolve the flapping issue first.  You're help is greatly appreciated.  Thanks!

Regards,

Terence

167
Views
0
Helpful
0
Replies