Troubleshoot a large number of MAC address MAC-move
- 0 Followed
- 0Collected ，1441Browsed
Network Topology
As this picture:
Problem Description
A large number of MAC movement records are generated on WH 1-2, and the MAC addresses are all AP addresses, not terminal addresses.
===============display mac-address mac-move===============
MAC address VLAN Current port Source port Last time Times
882a-5e7f-6cf0 99 GE1/0/9 GE1/0/1 2021-06-30 00:28:33 280
882a-5e7f-b910 99 GE1/0/9 GE1/0/2 2021-06-30 00:29:15 276
882a-5e7f-79e0 99 GE1/0/9 GE1/0/3 2021-06-30 00:28:47 275
882a-5e7f-c4e0 99 GE1/0/9 GE1/0/4 2021-06-30 00:28:24 267
882a-5e7f-f330 99 GE1/0/9 GE1/0/5 2021-06-30 00:30:05 269
882a-5e7f-6cf0 99 GE1/0/1 GE1/0/9 2021-06-30 00:28:37 279
882a-5e7f-b910 99 GE1/0/2 GE1/0/9 2021-06-30 00:29:24 276
882a-5e7f-79e0 99 GE1/0/3 GE1/0/9 2021-06-30 00:28:50 275
882a-5e7f-c4e0 99 GE1/0/4 GE1/0/9 2021-06-30 00:28:29 267
882a-5e7f-f330 99 GE1/0/5 GE1/0/9 2021-06-30 00:28:33 268
Process Analysis
1.Select one of the mac addresses for analysis[882a-5e7f-6cf0]
2.Use the command display mac-address mac-move | inc 882a-5e7f-6cf0 to find the mac move record.For example:
[CoreSWITCH-WH2]dis mac-add mac-move | inc 882a-5e7f-6cf0
882a-5e7f-6cf0 99 XGE1/1/2 XGE1/1/1 2021-07-08 14:48:17 1533
882a-5e7f-6cf0 99 XGE1/1/1 XGE1/1/2 2021-07-08 14:48:20 1522
3.It can be found that mac movement is only carried out between two ports.
4.Find the devices corresponding to the two ports and use the same command to troubleshoot the source.
5.Finally found a device without a MAC mobile record---There is a problem with the loop connection or error configuration of this device.
6.According to the above method, we finally found that there is no record of MAC move on WH 3-2.
After checking WH3-2, the following configuration was found:
[SWITCH-WH3-2-Ten-GigabitEthernet1/0/9]dis th
interface Ten-GigabitEthernet1/0/9
port link-mode bridge
description == TO WH3-1 ==
port link-type trunk
port bridge enable
port trunk permit vlan 1 10 99
port trunk pvid vlan 99
packet-filter name deny-to-mgnt inbound
#
The following is an explanation about this command:
port bridge enable
Use port bridge enable to enable bridging on an Ethernet interface.
Use undo port bridge enable to disable bridging on an Ethernet interface.
Syntax
undo port bridge enable
Default
Bridging is disabled on an Ethernet interface.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
By default, the device drops packets whose outgoing interface and incoming interface are the same.
To enable the device to forward such packets rather than drop them, execute this command in Ethernet interface view.
After the device receives a broadcast or unknown unicast packet, the device forwards the packet through all interfaces in the VLAN to which the incoming interface of the packet belongs.
Do not add interfaces configured with this command to an aggregation group.
Examples
# Enable bridging on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
Solution
[Sysname-GigabitEthernet1/0/1]undo port bridge enable