3

I have users complaining of slowness on their machines but we can't find anything specific (ping tests, etc). I'm trying to rule out the connection between the switch they're plugged into (3560) and the core switch (a stack of 3570s).

Currently the 3560 has one fiber connection trunked back to core switch. When tracing the trunk port back through the network I run into the odd issue of the MAC address of the 3560's trunk port disappearing from the MAC address table in the core switch. In the output below Switch1 is the core switch stack and Switch4 is the switch I'm investigating.

Switch4#sh int tru

Port        Mode             Encapsulation  Status        Native vlan
Gi1/2       on               802.1q         trunking      1

Port        Vlans allowed on trunk
Gi1/2       1-4094

Port        Vlans allowed and active in management domain
Gi1/2       1-2,30,40,42,50,60,70,72,80,82,99-100,102,254

Port        Vlans in spanning tree forwarding state and not pruned
Gi1/2       1-2,30,40,42,50,60,70,72,80,82,99-100,102,254

Switch4#sh int gi1/2

GigabitEthernet1/2 is up, line protocol is up (connected) 
  Hardware is Gigabit Ethernet, address is XXXX.dbd3.f0b2 (bia 30e4.dbd3.f0b2)

--Confirming which port is trunked back to Switch1

=======

Switch1#sh mac address-table | inc f0b2
   1    XXXX.dbd3.f0b2    DYNAMIC     Gi2/1/3
Switch1#sh mac address-table | inc f0b2
   1    XXXX.dbd3.f0b2    DYNAMIC     Gi2/1/3

--The mac address shows up when I search for it

Switch1#sh mac address-table | inc f0b2
Switch1#sh mac

--The mac address doesn't show up suddenly

Switch1#sh mac address-table | inc Gi2/1/3
   1    XXXX.dbd3.f0b2    DYNAMIC     Gi2/1/3
   1    XXXX.480e.2751    DYNAMIC     Gi2/1/3
  40    XXXX.11a0.5372    DYNAMIC     Gi2/1/3
  70    XXXX.5f0e.a116    DYNAMIC     Gi2/1/3
  80    XXXX.b6da.d050    DYNAMIC     Gi2/1/3
 100    XXXX.dbd3.f0c1    DYNAMIC     Gi2/1/3

--The mac address shows up in the table now

Switch1#sh mac address-table | inc f0b2   
   1    XXXX.dbd3.f0b2    DYNAMIC     Gi2/1/3

--The mac address shows up when I search for it again

Switch1#sh mac address-table | inc f0b2

--Then it doesn't

Switch1#sh mac address-table | inc Gi2/1/3
   1    XXXX.480e.2751    DYNAMIC     Gi2/1/3
  40    XXXX.11a0.5372    DYNAMIC     Gi2/1/3
  70    XXXX.5f0e.a116    DYNAMIC     Gi2/1/3
  80    XXXX.b6da.d050    DYNAMIC     Gi2/1/3
 100    XXXX.dbd3.f0c1    DYNAMIC     Gi2/1/3

--And it doesn't show up in the mac address table now

Switch1#sh mac address-table | inc f0b2   
   1    XXXX.dbd3.f0b2    DYNAMIC     Gi2/1/3

--Now it's back

Can anyone explain why this behavior is going on? I've checked on a few more trunk ports between my switches and I don't run into the "disappearing mac address" issue.

pauska
  • 19,620
  • 5
  • 57
  • 75
Winski Tech
  • 169
  • 3
  • 13
  • What is the port state where host with MAC XXXX.dbd3.f0b2 is **directly attached** when MAC Address disappears ? `show interface Gixx/xx/xx status` – krisFR May 29 '15 at 22:39
  • 1
    That's a strange anomaly but I don't think it's directly related to the problem. The switch port MAC address isn't used for traffic forwarding or for trunking as far as I'm aware. It may be indicative of a faulty switch or a faulty port, but I don't think it's related to the problem in the way you think it is (I'm assuming that your thinking is that traffic isn't being forwarded and trunking isn't working because of the missing MAC address). Switches don't move traffic based on the MAC addresses of the ports. – joeqwerty May 29 '15 at 23:28
  • Is the mac-address in active use? Cisco switches usually time out mac addresses in 5 minutes. You can change the mac aging timer and arp timer on the L3 gateway to solve this issue, if that is actually an issue. – cpt_fink Jun 04 '15 at 06:48

1 Answers1

1

My guess? It's mac flapping.

Do show logging on the switches to get the error messages first.

This could be a faulty link between the switches or Spanning Tree(STP) issue. There's only one trunk line between switches ?

Joseph Kern
  • 9,899
  • 4
  • 32
  • 56
CiscoNet Solutions
  • 46
  • 3