VRRP/HSRP with a flap between who is current master/active.EVPN multihoming (specially case with single-active where the VARP would switch which interface it is reachable through).Various loadbalancers performing traffic engineering on layer 2 level.Client troubleshooting between being connected through WIFI or TP-cable.WIFI networks with clients roaming between Access Points.Possible use cases when this can occur and you DONT want a pentalty (blocking) traffic: Which is why I created this thread in /r/cisco to verify if I have missed something here? It could be that the penalty is no longer true on a newer firmware on both catalyst and nexus series? Only similar command was related to 802.1x.
On the other hand I have failed to locate any similar command that enables this (fast MAC-address moves). Then why isnt this the same when it comes to fast MAC-address moves?īut again the references I posted in my original post when starting this thread might be wrong (that Cisco have a builtin pentalty of 15 seconds if a mac address moves faster than two times within 15 seconds)? Is there a way to ignore this similar to how HPE ComWare have these commands to deal with fast moving MAC-addresses (for example if you got several WIFI access points connected to the same switch and a WIFI client rapidly moves between these):Īs posted in there are various reasons for why I as the admin of the switch would like to tweak or completely disable this "feature".Īfter all you dont see switches come locked down to using "ip source guard" for example by default - they come wide open with the option available for you as the admin to enable it (if wanted/needed for whatever reason). Is this still true on a Cisco Catalyst or Cisco Nexus with an up2date firmware? That is the traffic from that MAC-address is basically being blocked until 15 seconds have passed. If the MAC address move between two ports that is reported is the HSRP virtual MAC address, the problem is most likely an issue in which both HSRP routers go into the active state.
#Nexus show mac address series#
The switch discards packets from this host for about 15 seconds in an effort to minimize the impact of an STP loop. Cisco Nexus 7000 Series NX-OS FabricPath Command Reference, Release 5.
#Nexus show mac address software#
In software version 5.5.2 and later for the Catalyst 4500/40G, the switch reports a host MAC address that moves if the host MAC address moves twice within 15 seconds. Troubleshooting a possible case of the same MAC-address showing up on multiple interfaces (loadbalancer with virtual mac-address) I found this article claiming that if detected the MAC-address is put on penalty for 15 seconds:
0 kommentar(er)
