EP IP Rogue ACI Fault

[mahmoudlotfy484]

Hi ,

I noticed IP rogue on ACI environment , and when I checked the history of faults , seems that same IP I learn once from correct interface Eth1/69 node LEAF1 and second time I learn it from Tunnel54 on Leaf2 which is already a VXLAN toward LEAF1!

Do you have an experience how to solve that or why this happens?

Attached Fault error & a simple Diagram for what I understand it's happening

[Remi-Astruc]

Hi @mahmoudlotfy484 ,

The Rogue detection is a leaf-local feature, meaning Leaf 2333 necessarily sees the IP on Tunnel54 AND on another interface. You have to find which one.

I am pretty sure you will also find the IP moving on 2334 1/69 and on another interface.

Regards