咨询一个N7K异常日志问题

[shanghaiyunji]

最近N7K上报了很多这种日志，是哪里出问题，大哥大姐们帮帮忙分析下，是有环路了么？

2018 Aug 31 16:06:09 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.acfd on Vlan253(port-channel10) is duplicate of local virtual ip,10.20.253.254

2018 Aug 31 16:06:20 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.acfb on Vlan251(port-channel10) is duplicate of local virtual ip,10.20.251.254

2018 Aug 31 16:06:30 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from 0000.0c07.ac05 onVlan5(port-channel10) is duplicate of local virtual ip, 10.20.5.254

2018 Aug 31 16:06:40 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.ac0d on Vlan13(port-channel10) is duplicate of local virtual ip,10.20.13.254

2018 Aug 31 16:06:50 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.ac15 on Vlan21(port-channel10) is duplicate of local virtual ip,10.20.21.254

2018 Aug 31 16:07:00 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.acfc on Vlan252(port-channel10) is duplicate of local virtual ip,10.20.252.254

2018 Aug 31 16:07:11 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.acfe on Vlan254(port-channel10) is duplicate of local virtual ip, 10.20.254.254

2018 Aug 31 16:07:21 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.ac06 on Vlan6(port-channel10) is duplicate of local virtual ip,10.20.6.254

2018 Aug 31 16:07:31 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from 0000.0c07.ac0aon Vlan10(port-channel10) is duplicate of local virtual ip, 10.20.10.254

[suzhouxiaoniu · Accepted solution]

其实主备一般都是要一致的，不然容易次优链路

[Terence.Jh]

这些提示的ip地址是否是一个HSRP的虚拟ip
7K与下行网络设备的NTP是否同步

[shanghaiyunji]

terence 发表于 2018-9-20 14:18
这些提示的ip地址是否是一个HSRP的虚拟ip
7K与下行网络设备的NTP是否同步

是HSRP的虚拟地址，NTP应该是同步的，都是指向同一台服务器，之前都没有报错，就最近几天一直报这个日志。

[Terence.Jh]

shanghaiyunji 发表于 2018-9-20 14:19
是HSRP的虚拟地址，NTP应该是同步的，都是指向同一台服务器，之前都没有报错，就最近几天一直报这个日志 ...

show mac address-table 追踪一下这个MAC是从哪里学习过来的，是不是两台HSRP的主备分别学习过来的
no ip arp gratuitous hsrp duplicate 可以在SVI接口下调用关闭HSRP无偿ARP解析
如果你的7K下联也做了VPC的话 也看下VPC状态吧
这明显是个冗余信息ARP重复解析了，出环不至于，感觉最多次优路径吧

[shanghaiyunji]

terence 发表于 2018-9-20 14:35
show mac address-table 追踪一下这个MAC是从哪里学习过来的，是不是两台HSRP的主备分别学习过来的
no ...

那我先查下MAC地址来源，服务器汇聚用N5K的也有做了VPC，VPC状态倒是正常

[suzhouxiaoniu]

0000.0c07.acfd 这是HSRP的虚拟MAC，后面的FD是组号，253也正好是VLAN号，
这么多的VLAN的HSRP同时报错，检查一下主备情况，
然后看一下主备的HSRP地址是否冲突【如果HSRP有冗余的话】，
然后检查上下游设备是否使用了和HSRP虚拟网关相同的IP地址x.x.x.254
从而导致了地址冲突。

[shanghaiyunji]

suzhouxiaoniu 发表于 2018-9-21 09:05
0000.0c07.acfd 这是HSRP的虚拟MAC，后面的FD是组号，253也正好是VLAN号，
这么多的VLAN的HSRP同时报错 ...

前辈不好意思，各了两个多月才回复，可确认的是HSRP地址没有冲突，上下游地址应该也没冲突。
就是有一个疑点不知道是否和这个日志有关：VPC的主备和HSRP主备以及STP主备是不一致的。

[nexusNXOS57758]

suzhouxiaoniu 发表于 2018-9-20 13:21
其实主备一般都是要一致的，不然容易次优链路

我的n9k也报这个错误，能具体解释一下么，两台N9K做VPC 他们hsrp 虚拟的网关都报这个错误。目前VPC正常 都在线。
2020 Nov 24 17:12:37 C9332C_FIWO_Core_66.0.2 %ARP-3-DUP_VADDR_SRC_IP: arp [29084] Source address of packet received from 0000.0c07.a
c01 on Vlan1(port-channel1) is duplicate of local virtual ip, 10.66.0.1
2020 Nov 24 17:04:03 C9332C_FIWO_Core_66.0.2 %ARP-3-DUP_VADDR_SRC_IP: arp [29084] Source address of packet received from 0000.0c07.a
c03 on Vlan402(port-channel1) is duplicate of local virtual ip, 10.66.4.1
配置为
Interface Grp Prio P State Active addr Standby addr Group addr
Vlan1 1 180 P Active local 10.66.0.3 10.66.0.1 (conf)
Vlan400 2 180 P Active local 10.66.2.3 10.66.2.1 (conf)
Vlan402 3 180 P Active local 10.66.4.3 10.66.4.1 (conf)
vPC domain id : 1
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : success
vPC role : primary, operational secondary
Number of vPCs configured : 5
Peer Gateway : Disabled
Dual-active excluded VLANs : -
Graceful Consistency Check : Enabled
Auto-recovery status : Disabled
Delay-restore status : Timer is off.(timeout = 30s)
Delay-restore SVI status : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router : Disabled
Virtual-peerlink mode : Disabled
vPC Peer-link status
---------------------------------------------------------------------
id Port Status Active vlans
-- ---- ------ -------------------------------------------------
1 Po1 up 1,400,402
vPC status
----------------------------------------------------------------------------
Id Port Status Consistency Reason Active vlans
-- ------------ ------ ----------- ------ ---------------
1 Po10 up success success 1,400

2 Po11 up success success 1,402

3 Po12 up success success 1,402

4 Po13 up success success 1,402

5 Po14 up success success 1,402

[shimingbu7385]

当时有没有注意hsrp的一个状态是否正常？