%SW_MATM-4-MACFLAP_NOTIF

aflhotsg
aflhotsg used Ask the Experts™
on
we have a cisco catalyst 2960 switch connected to another enterasys l2 switch.
our cisco switch port 23 is connected as an uplink , no trunking mode.

we have a sun server and its 2 interfaces are connected to the switch  to ports 1 and 5. the multipathing is also built on these two interfaces with a virtual ip.

we have inspected the switch logging and found the below messages frequently appearing  

Oct 20 02:24:42.920: %SW_MATM-4-MACFLAP_NOTIF: Host 000b.5de5.c83c in vlan 1000
is flapping between port Gi0/23 and port Gi0/1
Oct 20 02:25:28.798: %SW_MATM-4-MACFLAP_NOTIF: Host 000b.5de5.c83c in vlan 1000
is flapping between port Gi0/23 and port Gi0/1
Oct 20 02:35:27.149: %SW_MATM-4-MACFLAP_NOTIF: Host 000b.5de5.c7e4 in vlan 1000
is flapping between port Gi0/23 and port Gi0/5
Oct 20 02:36:12.858: %SW_MATM-4-MACFLAP_NOTIF: Host 000b.5de5.c7e4 in vlan 1000
is flapping between port Gi0/23 and port Gi0/5

can an analysis/ resolution be advised in this situation.

regards
jagadish(aflhotsg)
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
So how many total interfaces does that sun server have? Also, the uplink from the Cisco on g0/23 connects to the enterasys l2 switch? If so, does the Sun server have NICs connected on the enterasys as well?
Commented:
The reason I ask is that it seems like load balancing has been configured on the server and it is randomly announcing those mac addresses on different NIC interfaces and if g0/23 is an uplink, possibly one or some of these interfaces are even on another switch or switches. Maybe you can disable that type of load balancing on the server..
Commented:
hi,
there is multipathing configured on the sun server interfaces , that means on the two interfaces there are ips and there is a virtual ip on these two interfaces.

we can not disable this since it is required configuration to work.
OWASP: Forgery and Phishing

Learn the techniques to avoid forgery and phishing attacks and the types of attacks an application or network may face.

Author

Commented:
further , the sun server has got 2 interfaces and is connected to cisco 2960g switch only.

Author

Commented:
close this issue

Author

Commented:
common replay

Author

Commented:
we have logged the case with CISCO too but they advise to check our network for any circling.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial