I have a lot of Teradici thin clients connected to a Cisco 9300 access layer switch with Port Security enabled on the ports. Port security will trip at random intervals (sometimes 5 hours, sometimes, 12) and shutdown the port. When logs are checked, the mac address tripping is not a device on our network and is always a different mac -- as if it were randomly generated. From a networking perspective, the switch is behaving as it it should as it sees another mac and shuts down the port. This has happened both during off hours when no one is present and during working hours when the device is actively being used.
The Thin client itself passes minimal traffic to the VMWare server and to its PCOIP server. I have switched out devices, cables, and updated firmware on the thin client.
My question is, first of all, has anyone else encountered this, and is there anything from a network perspective that could cause a switch to see a random mac address coming from a device like this.
