Hello,
I have a problem with a 9 3750 switch stack. If you take a look at the show proc cpu history command , the following is seen:
1291999691191111911110111991117911119111191111911119111931
8994899595719876945570744993236132549385494445924169433963
100 * *** * * * ** * * * * *
90 * *** * * * * ** * * * * * *
80 * *** * * * * ** ** * * * * *
70 * ***** * * * ** ** * * * * *
60 * ***** * * * ** ** * * * * *
50 * ***** * * * ** ** * * * * *
40 * ***** * * * ** ** * * * * **
30 ** *##** * * * ** ** * * * * **
20 **# #####**#****# ***#* ## *# * # ** # *# *# #*
10 ##########################################################
0....5....1....1....2....2....3....3....4....4....5....5....
0 5 0 5 0 5 0 5 0 5
--> A CPU peak every 5 minutes.
The proccess causing this behaviour is hulc running con but I have confirmed that nobody or nothing is trying to configure at the switch, neither by clli or snmp.
Luckuly, we have placed a "debug dai" at the router and got the following information:
3y12w: is_dai_trusted_interface: Unable to retrieve subblock for Gi9/0/8
3y12w: dai_get_cfg_interface_rate_limit: Unable to retrieve subblock for Gi9/0/8.
3y12w: is_dai_trusted_interface: Unable to retrieve subblock for Gi9/0/9
3y12w: dai_get_cfg_interface_rate_limit: Unable to retrieve subblock for Gi9/0/9.
3y12w: is_dai_trusted_interface: Unable to retrieve subblock for Gi9/0/10
3y12w: dai_get_cfg_interface_rate_limit: Unable to retrieve subblock for Gi9/0/10.
3y12w: is_dai_trusted_interface: Unable to retrieve subblock for Gi9/0/11
3y12w: dai_get_cfg_interface_rate_limit: Unable to retrieve subblock for Gi9/0/11.
3y12w: is_dai_trusted_interface: Unable to retrieve subblock for Gi9/0/12
3y12w: dai_get_cfg_interface_rate_limit: Unable to retrieve subblock for Gi9/0/12.
3y12w: is_dai_trusted_interface: Unable to retrieve subblock for Gi9/0/13
3y12w: dai_get_cfg_interface_rate_limit: Unable to retrieve subblock for Gi9/0/13.
3y12w: is_dai_trusted_interface: Unable to retrieve subblock for Gi9/0/14
3y12w: dai_get_cfg_interface_rate_limit: Unable to retrieve subblock for Gi9/0/14.
3y12w: is_dai_trusted_interface: Unable to retrieve subblock for Gi9/0/15
3y12w: dai_get_cfg_interface_rate_limit: Unable to retrieve subblock for Gi9/0/15.
3y12w: is_dai_trusted_interface: Unable to retrieve subblock for Gi9/0/16
3y12w: dai_get_cfg_interface_rate_limit: Unable to retrieve subblock for Gi9/0/16.
3y12w: is_dai_trusted_interface: Unable to retrieve subblock for Gi9/0/17
3y12w: dai_get_cfg_interface_rate_limit: Unable to retrieve subblock for Gi9/0/17.
3y12w: is_dai_trusted_i
The question is why the router performs this polling every 5 minutes to all the interfaces, asking for a rate of a funcinality that is not enabled.
This logs matches exactly with the CPU peaks.
We have investigated this logs and we have confirmed that DAI fucionality is not enabled at the switch:
SWITCH# show ip arp inspection
Source Mac Validation : Disabled
Destination Mac Validation : Disabled
IP Address Validation : Disabled
No active or enabled vlans on switch.
Is it maybe a normal background proccess that runs in all the switches but , for some kind of reason, is not working properly?
Any idea?
Thanks in advance
Best Regards
Francisco Gonzalo
