Hi Naitik,
REf: https://supportforums.cisco.com/docs/DOC-4065
The default form of error message is:
%C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: Packet received with invalid
source MAC address ([mac-addr] ) on port [char] in vlan [dec]
This means a packet was received with an all zero (00:00:00:00:00:00) or a
multicast source address, for example, FF:FF:FF:FF:FF:FF. which is a Layer 2
broadcast. The packet is treated as invalid and no learning is done.
Excessive flow of such packets can waste CPU cycles. This message is
rate-limited and is displayed only for the first such packet received on any
interface or VLAN. Subsequent messages display the cumulative count of all
such packets received in given interval on all interfaces.
Resolution
Check the switch configuration file in order to find the source of these
packets on the specified port and take corrective action in order to fix
them at the source end. For example, it can be due to a faulty NIC or
connected hub. You can also setup a SPAN session to identify the source.
Alternatively, you can also issue the switchport port-security limit rate
invalid-source-mac command in order to enable port security on that
interface in order to shutdown the port if the incoming rate of packets with
invalid source mac address is too high.
These errors are only informative and are not directly related with the
switch. The important thing is to find the source of the packet or the
device that is sending the packet. This indicates that a bad packet was
received and was dropped. This could have been sourced as bad packet for
different reasons; such as the size of Ethernet frame reported different
from expected IP packet size. The issue can be reported due to bad NIC
cards, bad NIC drivers, or bad application.
This message is for informational purpose only. In older IOS versions, these
packets are normally dropped without being logged.
If you are receiving a large amount of these errors you might try to track
down the source device that is sending the erroneous packets, you'll need to
use a network sniffer. You might also examine the adjacent Cisco device for
other errors.
Kindly also check the folloing things:
a) A faulty NIC teaming setup on certain servers where the standby NIC
was sourcing packets with the all zero's mac address.
b) A checkpoint firewall system inappropriately (i.e. - against IEEE
standards) using Multicast source address (though to a true multicast
source address). I believe at one point in time, the Checkpoint system
was even sending the all zero's as well too (but I might be
intermingling my recollections)
HTH
REgards
Inayath
***********Plz rate if this information is helpfull to you ************************
