cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

730
Views
0
Helpful
8
Replies

HSRP state changing back and forth

Hi All,

Can any one let me know what would be the issue , that  HSRP states on  the switches are changing frequently from standby to speak and back & forth. Please suggest any solution for the same . Below are the logs.

1407632: May 28 12:26:59: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Standby -> Active
1407633: May 28 12:27:00: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Active -> Speak
1407634: May 28 12:27:03: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Speak -> Standby
1407635: May 30 08:12:08: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Standby -> Active
1407636: May 30 08:12:08: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Active -> Speak
1407637: May 30 08:12:10: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Speak -> Standby

Everyone's tags (1)
8 REPLIES 8
VIP Mentor

Hi

Hi

check the physical path of the cabling between the device that are in HSRP together there could be a loose cable somewhere ,check the interface stats of each connection , also check you have no continuous STP changes that are causing it in background

make sure timers for HSRP match each side as well , usually though this is a layer 1 or 2 issue

sh spanning-tree de | i ieee|occur|from|is exec

Here are the logs(by running

Here are the logs(by running the above command) which I have collected from the switches , I found that rstp is frequently changing here .

Switch-1:

------------

VLAN0099 is executing the rstp compatible Spanning Tree protocol
  Number of topology changes 90 last change occurred 1y11w ago
          from Port-channel1
 VLAN0200 is executing the rstp compatible Spanning Tree protocol
  Number of topology changes 39062 last change occurred 00:17:23 ago
          from GigabitEthernet1/5
 VLAN0244 is executing the rstp compatible Spanning Tree protocol
  Number of topology changes 1 last change occurred 5y4w ago
          from Port-channel1

Switch-2:

------------

VLAN0099 is executing the rstp compatible Spanning Tree protocol
  Number of topology changes 27 last change occurred 1y11w ago
          from Port-channel1
 VLAN0200 is executing the rstp compatible Spanning Tree protocol
  Number of topology changes 40869 last change occurred 00:13:40 ago
          from GigabitEthernet1/5

Please let me know what can be tunes here .

VIP Mentor

Have you got a screenshot or

Have you got a screenshot or something of the physical topology here how its cabled , is vlan 200 configured the same in STP as the other vlans  

you could try trace the change through whats connected to g1/5 if its another switch jump onto it and run the command above again try and follow the vlan 200 issue , theres a layer 2 issue with that vlan just need to find why and where

Hello Mark,

Hello Mark,

Here are the configuration of switches. Actually I do not have the network diagram. Meanwhile I will check the physical connections as well.

VIP Mentor

Is that the port constantly

Is that the port constantly flapping from the stop logs g1/5 whats connected to it , is it another switch ?

interface Vlan200
 description ADMIN
 ip address 172.17.101.132 255.255.255.128
 ip access-group ICMP in
 ip access-group ISOLATE out
 no ip redirects
 no ip proxy-arp
 no ip route-cache cef
 no ip route-cache
 standby 100 ip 172.17.101.134
 standby 100 timers 1 2
 standby 100 priority 105
 standby 100 preempt
 standby 100 track GigabitEthernet1/5


interface GigabitEthernet1/5
 description Connection to Customer Admin/ UPLINK to customer
 switchport access vlan 200
 switchport mode access
 logging event link-status
 logging event trunk-status
 storm-control broadcast level 1.00
 storm-control action trap
 no cdp enable
 spanning-tree cost 5

Hello Mark,

Hello Mark,

No..! it(Gig1/5) is not flapping , but occasionally. Gig1/5  is an uplink to the customer/client site and it is a router. Here I have attached the logs of the switches.

Thanks ,

Mohammad.

Highlighted
VIP Mentor

Hi

Hi

You need to find theses macs below see exactly whats going on with them what traffic there sending  , check the arp for them as well on l3 device

4534787: .Sep 14 15:56:57: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 184 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:21:28:4F:A1:9A, destination mac 00:00:0C:07:AC:65, source IP 172.17.101.17, destination IP 10.29.102.15

4534788: .Sep 14 16:07:12: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 191 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:21:5E:ED:64:94, destination mac 00:00:0C:07:AC:65, source IP 172.17.101.54, destination IP 96.0.0.0

4534789: .Sep 14 16:17:13: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 182 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:21:28:4F:A1:9A, destination mac 00:00:0C:07:AC:65, source IP 172.17.101.17, destination IP 10.29.102.15

4534790: .Sep 14 16:27:25: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 183 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:1E:67:00:C5:EA, destination mac 00:00:0C:07:AC:65, source IP 172.17.101.71, destination IP 10.10.10.10

4534791: .Sep 14 16:37:29: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 189 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:21:28:4F:A1:9A, destination mac 00:00:0C:07:AC:65, source IP 172.17.101.17, destination IP 10.29.102.15

4534792: .Sep 14 16:47:52: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 184 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:1A:64:DE:4F:36, destination mac 00:00:0C:07:AC:64, source IP 172.17.101.185, destination IP 172.17.200.11

4534793: .Sep 14 16:58:02: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 187 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:1A:64:DE:4F:36, destination mac 00:00:0C:07:AC:64, source IP 172.17.101.185, destination IP 172.17.200.11

 

*************************************************************************************

Error Message C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTE:Unable to determine whether to route or bridge replicated software-processed packet with source address [mac-addr] and destination address [mac-addr]

 

Explanation When a replicated packet is sent to the software by an output ACL, the hardware does not indicate whether the packet needs to be bridged or routed.

 

When resources are exhausted or when the ACLs programmed in the hardware cannot handle processing directly (such as ACLs matching TCP flags), the Supervisor Engine III sends the packets to software for processing. If the software cannot determine whether to bridge or route, the packet might be dropped. This drop indicates that the packet was directed to a Hot Standby Routing Protocol (HSRP) router group MAC address.

VIP Mentor

There may be an issue with

There may be an issue with that router and the arp for those macs , that's where the STP is seeing an issue come from the g1/5 interface that's causing confliction and problem with root bridge , have they done or changed something their end

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards