Ju,
Anytime a leaf learns a local L3 endpoint it retains both the MAC and IP. Lets call this endpoint MAC-A and IP-A. The leaf will keep this IP learned on this mac until either:
A) The IP is learned on a new mac (IP-A moves from MAC-A to MAC-B)
or
B) The mac address is cleared from the endpoint table
At 75% of the endpoint retention timer, the leaf will send out host tracking packets (ARPs) for the IP addresses associated to the mac. If your endpoint has multiple IPs associated to 1 MAC and that endpoint responds to any of the host track packets, then the leaf will refresh that endpoint retention timer with all IPs retained.
==========================
Possible Solutions:
1.) Flush the endpoint table for the BD. (Warning this will remove all endpoints from the endpoint table within the BD. Potential outage could occur within this BD since it would have to re-learn all of the endpoints. Endpoints would not be flushed on any other BD/VRF)
Log into the APIC GUI. Navigate to the BD settings of where the endpoint exists. Change the L2 Unknown Unicast setting and click submit. If the setting if 'Flood' then change it to 'Hardware Proxy'. After changing and submitting the change, then the endpoint table will flushed. This only takes a couple seconds so you can change the setting back to your original configuration immediately after.
2.) Clear single IP from switch. This method is not guaranteed to work but it is less impactive on other endpoints within the EPG/BD.
Log into leaf/leaves which contain the endpoint. Go into the vsh mode by simply executing vsh. Once in vsh, then execute the clear endpoint command.
# vsh
# clear system internal epm endpoint key vrf <vrf_name> ip x.x.x.x
Example below:
leaf# vsh
Cisco iNX-OS Debug Shell
This shell should only be used for internal commands and exists
for legacy reasons. User should use ibash infrastructure as this
will be deprecated.
leaf# clear system internal epm endpoint key vrf jw1:jw1 ip 10.10.10.10
-Jason
