03-02-2020 08:19 PM
Hi all,
Since yesterday, we're having this weird issues that switch ports are going to err-disable due to exceed arp packets:
We're seeing these logs:
03-02-2020 08:52 PM
Hi,
This could be caused by your Windows clients? Are you running Windows 7 or Windows 10? Has there been a change to the Windows clients e.g. upgrade from Windows 7 to Windows 10, updates to Windows
Thanks
John
03-02-2020 09:55 PM
@johnd2310 wrote:Hi,
This could be caused by your Windows clients? Are you running Windows 7 or Windows 10? Has there been a change to the Windows clients e.g. upgrade from Windows 7 to Windows 10, updates to Windows
Thanks
John
Windows 10 and no changes ( except regular updates) . Only change to clients is a new antivirus solution (Crowdstrike) which has been recently rolled out to a pilot group. Could this be caused by that?
03-03-2020 04:28 PM
Hi,
If the machines causing this are part of the pilot group that has the new software, then that could be the cause. If this is isolated to a few machines, then look at these machines.
Thanks
John
03-03-2020 09:58 AM
Hi,
There is something weird with those hosts.Take one, make packet captures, stop processes and see which process or windows service is responsible.
Regards,
Cristian Matei.
03-03-2020 04:24 PM
Hello,
Can you please try to apply "ip arp inspection trust" on any of the ports and test.. IF still no luck then, share the interface configuration to better understand.
Thanks,
Raja
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide