cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
261
Views
2
Helpful
4
Replies

MACMOVE network loop generated randomly with access manager enabled

LS4568481
Visitor

We've got an interesting scenario where a few different times at 3 different locations, we've had entire switch stacks where ports with Cisco Access Manager enabled stop forwarding traffic.  Today we were able to determine that when this occurs, its because a device on one port starts reflecting mac addresses as if it has that device causing what appears to look like a loop to the switch stack.  Unplugging the device and the CAM ports recover almost instantly.  If a port didn't have CAM enabled, it never gets affected by this scenario, even if its on the same vlan.

C9300s, cloud managed in meraki dashboard

CAM enabled on majority of ports

Cisco 8851 desk phones

HP G6 thunderbolt docking station connected to the 8851 phone

So far TAC has just stated a loop occured and unplugging the offending device fixed the loop.  This clearly isn't a normal loop as its pretty strange a phone or dock would cause this to occur only for the CAM enabled ports.  Any ideas as to how CAM is playing a role in this?

4 Replies 4

Update firmware on all connected devices. Especially that USB dock.

We are working that angle as well but the fw notes don't indicate they address anything like this.  Is your advice based on a similar scenario or general good practice?  

Both. I've seen this exact scenario (albeit with ISE and not Access Manager) but exact same reflected MAC address issue. Was a faulty network stack on a printer. Firmware update resolved it. You should do the same updates on the docking station.

This scenario doesn't consistently occur, very random at best so hard to tell.  We did discover in HP's latest docking station firmware notes that "network issues" are supposedly addressed so we are going to start rolling out the latest firmware to all docking stations.  Hopefully this resolves our issue!