Flapping Issues L2 switchs 1 Cisco3850 and 2 Enterasys C3!!!

[legend_mau]

Hi everyone!!!

This is a new challenge

I've three switchs.

By STP the CISCO switch is the ROOT.

One VLAN (vlan1)

and in the NM  switch CISCO (4 ports -1GB) there are 2 switch Enterasys by SFP

The problem is that in the log Switch has this:

Jul 5 13:52:04.295: %SW_MATM-4-MACFLAP_NOTIF: Host b88a.60f6.36be in vlan 1 is flapping between port Gi1/1/3 and port Gi1/0/18
Jul 5 13:52:06.183: %SW_MATM-4-MACFLAP_NOTIF: Host 10fe.ed93.ad65 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/4
Jul 5 13:52:23.752: %SW_MATM-4-MACFLAP_NOTIF: Host b88a.60f6.367d in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/2
Jul 5 13:52:42.218: %SW_MATM-4-MACFLAP_NOTIF: Host f8bc.1280.ffd7 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/0/11
Jul 5 13:52:46.010: %SW_MATM-4-MACFLAP_NOTIF: Host e8de.2778.7115 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/4
Jul 5 13:53:00.491: %SW_MATM-4-MACFLAP_NOTIF: Host 1c3e.8451.5e8d in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/2
Jul 5 13:53:03.600: %SW_MATM-4-MACFLAP_NOTIF: Host 0201.0000.0000 in vlan 1 is flapping between port Gi1/0/22 and port Gi1/0/24
Jul 5 13:53:04.650: %SW_MATM-4-MACFLAP_NOTIF: Host c018.85c6.a6b3 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/2
Jul 5 13:53:11.693: %SW_MATM-4-MACFLAP_NOTIF: Host 90b1.1c93.2e2d in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/2
Jul 5 13:53:19.265: %SW_MATM-4-MACFLAP_NOTIF: Host acb5.7d6c.141d in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/2
Jul 5 13:53:34.963: %SW_MATM-4-MACFLAP_NOTIF: Host e4a7.a0ef.fd12 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/4
Jul 5 13:53:49.429: %SW_MATM-4-MACFLAP_NOTIF: Host f04d.a236.9076 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/0/24
Jul 5 13:54:16.317: %SW_MATM-4-MACFLAP_NOTIF: Host 645a.042a.0ad5 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/1

And for example:

Jul 5 13:53:03.600: %SW_MATM-4-MACFLAP_NOTIF: Host 0201.0000.0000 in vlan 1 is flapping between port Gi1/0/22 and port Gi1/0/24

 On port Gi1/0/22 I've physical CPU directed connected with the address: 4ceb.425a.74f9 and not 0201.0000.0000.

This is a continuos behavior, This a aditional information:

Please help me, I configured ports in trunk on cisco and... nothing...

SW_CORE#show int status

Port Name Status Vlan Duplex Speed Type
Gi1/0/1 LINK - FIREWALL connected 1 a-full a-100 10/100/1000BaseTX
Gi1/0/2 notconnect 1 auto auto 10/100/1000BaseTX
Gi1/0/3 connected 1 a-full a-100 10/100/1000BaseTX
Gi1/0/4 connected 1 a-full a-100 10/100/1000BaseTX
Gi1/0/5 connected 1 a-full a-100 10/100/1000BaseTX
Gi1/0/6 connected 1 a-full a-1000 10/100/1000BaseTX
Gi1/0/7 notconnect 1 auto auto 10/100/1000BaseTX
Gi1/0/8 connected 1 a-full a-1000 10/100/1000BaseTX
Gi1/0/9 connected 1 a-full a-1000 10/100/1000BaseTX
Gi1/0/10 connected 1 a-full a-1000 10/100/1000BaseTX
Gi1/0/11 connected 1 a-full a-100 10/100/1000BaseTX
Gi1/0/12 connected 1 a-full a-1000 10/100/1000BaseTX
Gi1/0/13 notconnect 1 full 10 10/100/1000BaseTX
Gi1/0/14 connected 1 a-full a-1000 10/100/1000BaseTX
Gi1/0/15 connected 1 full a-1000 10/100/1000BaseTX
Gi1/0/16 notconnect 1 auto auto 10/100/1000BaseTX
Gi1/0/17 notconnect 1 auto auto 10/100/1000BaseTX
Gi1/0/18 connected 1 a-full a-1000 10/100/1000BaseTX
Gi1/0/19 notconnect 1 full 100 10/100/1000BaseTX
Gi1/0/20 connected 1 a-full a-1000 10/100/1000BaseTX
Gi1/0/21 notconnect 1 full 1000 10/100/1000BaseTX
Gi1/0/22 connected 1 a-full a-100 10/100/1000BaseTX
Gi1/0/23 connected 1 a-full a-1000 10/100/1000BaseTX
Gi1/0/24 connected 1 a-full a-1000 10/100/1000BaseTX
Gi1/1/1 connected 1 full 1000 1000BaseSX SFP
Gi1/1/2 connected 1 full 1000 1000BaseSX SFP
Gi1/1/3 connected 1 full 1000 1000BaseSX SFP
Gi1/1/4 connected 1 full 1000 1000BaseSX SFP

___________________________________________________________________________________

SW_CORE#show spanning-tree

VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 4097
Address 2c31.242f.8280
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 4097 (priority 4096 sys-id-ext 1)
Address 2c31.242f.8280
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec

Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Gi1/0/1 Desg FWD 19 128.1 P2p
Gi1/0/3 Desg FWD 19 128.3 P2p Edge
Gi1/0/4 Desg FWD 19 128.4 P2p
Gi1/0/5 Desg FWD 19 128.5 P2p
Gi1/0/6 Desg FWD 4 128.6 P2p
Gi1/0/8 Desg FWD 4 128.8 P2p
Gi1/0/9 Desg FWD 4 128.9 P2p
Gi1/0/10 Desg FWD 4 128.10 P2p
Gi1/0/11 Desg FWD 19 128.11 P2p
Gi1/0/12 Desg FWD 4 128.12 P2p
Gi1/0/14 Desg FWD 4 128.14 P2p
Gi1/0/15 Desg FWD 4 128.15 P2p Edge
Gi1/0/18 Desg FWD 4 128.18 P2p
Gi1/0/20 Desg FWD 4 128.20 P2p
Gi1/0/22 Desg FWD 19 128.22 P2p
Gi1/0/23 Desg FWD 4 128.23 P2p
Gi1/0/24 Desg FWD 4 128.24 P2p
Gi1/1/1 Desg FWD 4 128.25 P2p
Gi1/1/2 Desg FWD 4 128.26 P2p
Gi1/1/3 Desg FWD 4 128.27 P2p
Gi1/1/4 Desg FWD 4 128.28 P2p

______________________________________________________________________________________________

GigabitEthernet1/1/1 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 2c31.242f.8299 (bia 2c31.242f.8299)
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not set
Full-duplex, 1000Mb/s, link type is auto, media type is 1000BaseSX SFP
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:25, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 79000 bits/sec, 39 packets/sec
5 minute output rate 143000 bits/sec, 109 packets/sec
3252111 packets input, 1627828585 bytes, 0 no buffer
Received 162355 broadcasts (62249 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 62249 multicast, 0 pause input
0 input packets with dribble condition detected
5374842 packets output, 3135970344 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
GigabitEthernet1/1/2 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 2c31.242f.829a (bia 2c31.242f.829a)
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not set
Full-duplex, 1000Mb/s, link type is auto, media type is 1000BaseSX SFP
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:23, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 77000 bits/sec, 42 packets/sec
5 minute output rate 206000 bits/sec, 96 packets/sec
20269218 packets input, 20388500744 bytes, 0 no buffer
Received 365449 broadcasts (150604 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 150604 multicast, 0 pause input
0 input packets with dribble condition detected
14519717 packets output, 5322255880 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
GigabitEthernet1/1/3 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 2c31.242f.829b (bia 2c31.242f.829b)
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 2/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not set
Full-duplex, 1000Mb/s, link type is auto, media type is 1000BaseSX SFP
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:03, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 933000 bits/sec, 531 packets/sec
5 minute output rate 9181000 bits/sec, 915 packets/sec
55452035 packets input, 3824651906 bytes, 0 no buffer
Received 201965 broadcasts (64836 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 64836 multicast, 0 pause input
0 input packets with dribble condition detected
109317466 packets output, 110023443914 bytes, 0 underruns
0 output errors, 0 collisions, 5 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
GigabitEthernet1/1/4 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 2c31.242f.829c (bia 2c31.242f.829c)
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 2/255
Encapsulation ARPA, loopback not set
Keepalive not set
Full-duplex, 1000Mb/s, link type is auto, media type is 1000BaseSX SFP
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:05, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 9808000 bits/sec, 1014 packets/sec
5 minute output rate 1300000 bits/sec, 638 packets/sec
95122492 packets input, 89574069862 bytes, 0 no buffer
Received 438681 broadcasts (114872 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 114872 multicast, 0 pause input
0 input packets with dribble condition detected
52294404 packets output, 9024886318 bytes, 0 underruns
0 output errors, 0 collisions, 3 interface resets
1085 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

_________________________________________________________________________________________

Name: Gi1/1/1
Switchport: Enabled
Administrative Mode: dynamic auto
Operational Mode: static access
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: native
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL

Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none

Name: Gi1/1/2
Switchport: Enabled
Administrative Mode: dynamic auto
Operational Mode: static access
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: native
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL

Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none

Name: Gi1/1/3
Switchport: Enabled
Administrative Mode: dynamic auto
Operational Mode: static access
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: native
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL

Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none

Name: Gi1/1/4
Switchport: Enabled
Administrative Mode: dynamic auto
Operational Mode: static access
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: native
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL

Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none

[Julio E. Moisa]

Hi

These error messages are indicating a loop or a roaming for a wireless client. Which devices are connected to the ports displayed here:

Jul 5 13:52:04.295: %SW_MATM-4-MACFLAP_NOTIF: Host b88a.60f6.36be in vlan 1 is flapping between port Gi1/1/3 and port Gi1/0/18
Jul 5 13:52:06.183: %SW_MATM-4-MACFLAP_NOTIF: Host 10fe.ed93.ad65 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/4
Jul 5 13:52:23.752: %SW_MATM-4-MACFLAP_NOTIF: Host b88a.60f6.367d in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/2
Jul 5 13:52:42.218: %SW_MATM-4-MACFLAP_NOTIF: Host f8bc.1280.ffd7 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/0/11
Jul 5 13:52:46.010: %SW_MATM-4-MACFLAP_NOTIF: Host e8de.2778.7115 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/4
Jul 5 13:53:00.491: %SW_MATM-4-MACFLAP_NOTIF: Host 1c3e.8451.5e8d in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/2
Jul 5 13:53:03.600: %SW_MATM-4-MACFLAP_NOTIF: Host 0201.0000.0000 in vlan 1 is flapping between port Gi1/0/22 and port Gi1/0/24
Jul 5 13:53:04.650: %SW_MATM-4-MACFLAP_NOTIF: Host c018.85c6.a6b3 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/2
Jul 5 13:53:11.693: %SW_MATM-4-MACFLAP_NOTIF: Host 90b1.1c93.2e2d in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/2
Jul 5 13:53:19.265: %SW_MATM-4-MACFLAP_NOTIF: Host acb5.7d6c.141d in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/2
Jul 5 13:53:34.963: %SW_MATM-4-MACFLAP_NOTIF: Host e4a7.a0ef.fd12 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/4
Jul 5 13:53:49.429: %SW_MATM-4-MACFLAP_NOTIF: Host f04d.a236.9076 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/0/24
Jul 5 13:54:16.317: %SW_MATM-4-MACFLAP_NOTIF: Host 645a.042a.0ad5 in vlan 1 is flapping between port Gi1/1/3 and port Gi1/1/1

[legend_mau]

Thanks Julio.

On ports g1/1/1 - 4. There are connected 4 switch Enterasys.

I don't see any problem with the APs.

Is like the Enterasys return the MAC Address learned by the cisco. Loop

[paul driver]

Hello

This seems more like a loop given the timframe the flapping is occuring.

If you know you network, You should be able to check to see what ports shouldn't be forwarding .

sh int trunk <--- check what ports should be forwarding and shouldnt be.

I configured ports in trunk on cisco and... nothing

Name: Gi1/1/3
Switchport: Enabled
Administrative Mode: dynamic auto
Operational Mode: static access
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: native
Negotiation of Trunking: On

Also the ports you say are confiured as trunks still are showing an operationl mode of acess and not trunk and you have DTP still enabled

If these ports need to be trunks then make them so and disable DTP and staticly define the port as a trunk.

switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate

If they need to be access ports again then make them so and alppy portfast/bpdugaurd to protect from users inadvertanyly attaching unwarrented devcies to the port.

switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable

Lasty make sure you dont have STP bpdu-filter applied as this in effect ingores received bpdus and can cause loops

res
Paul

[legend_mau]

Thanks Paul. Respect to Trunk port. I configured the ports in NM trunk three days before but the users doesn't reach the GW. So I configured the port in auto and the endless configuration was access.