05-31-2016 11:48 PM - edited 03-08-2019 06:01 AM
Hi All,
Can any one let me know what would be the issue , that HSRP states on the switches are changing frequently from standby to speak and back & forth. Please suggest any solution for the same . Below are the logs.
1407632: May 28 12:26:59: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Standby -> Active
1407633: May 28 12:27:00: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Active -> Speak
1407634: May 28 12:27:03: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Speak -> Standby
1407635: May 30 08:12:08: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Standby -> Active
1407636: May 30 08:12:08: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Active -> Speak
1407637: May 30 08:12:10: %HSRP-5-STATECHANGE: Vlan200 Grp 100 state Speak -> Standby
06-01-2016 12:40 AM
Hi
check the physical path of the cabling between the device that are in HSRP together there could be a loose cable somewhere ,check the interface stats of each connection , also check you have no continuous STP changes that are causing it in background
make sure timers for HSRP match each side as well , usually though this is a layer 1 or 2 issue
sh spanning-tree de | i ieee|occur|from|is exec
06-01-2016 02:14 AM
Here are the logs(by running the above command) which I have collected from the switches , I found that rstp is frequently changing here .
Switch-1:
------------
VLAN0099 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 90 last change occurred 1y11w ago
from Port-channel1
VLAN0200 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 39062 last change occurred 00:17:23 ago
from GigabitEthernet1/5
VLAN0244 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 1 last change occurred 5y4w ago
from Port-channel1
Switch-2:
------------
VLAN0099 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 27 last change occurred 1y11w ago
from Port-channel1
VLAN0200 is executing the rstp compatible Spanning Tree protocol
Number of topology changes 40869 last change occurred 00:13:40 ago
from GigabitEthernet1/5
Please let me know what can be tunes here .
06-01-2016 03:03 AM
Have you got a screenshot or something of the physical topology here how its cabled , is vlan 200 configured the same in STP as the other vlans
you could try trace the change through whats connected to g1/5 if its another switch jump onto it and run the command above again try and follow the vlan 200 issue , theres a layer 2 issue with that vlan just need to find why and where
06-01-2016 03:29 AM
06-01-2016 05:22 AM
Is that the port constantly flapping from the stop logs g1/5 whats connected to it , is it another switch ?
interface Vlan200
description ADMIN
ip address 172.17.101.132 255.255.255.128
ip access-group ICMP in
ip access-group ISOLATE out
no ip redirects
no ip proxy-arp
no ip route-cache cef
no ip route-cache
standby 100 ip 172.17.101.134
standby 100 timers 1 2
standby 100 priority 105
standby 100 preempt
standby 100 track GigabitEthernet1/5
interface GigabitEthernet1/5
description Connection to Customer Admin/ UPLINK to customer
switchport access vlan 200
switchport mode access
logging event link-status
logging event trunk-status
storm-control broadcast level 1.00
storm-control action trap
no cdp enable
spanning-tree cost 5
06-01-2016 10:44 PM
06-02-2016 12:37 AM
Hi
You need to find theses macs below see exactly whats going on with them what traffic there sending , check the arp for them as well on l3 device
4534787: .Sep 14 15:56:57: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 184 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:21:28:4F:A1:9A, destination mac 00:00:0C:07:AC:65, source IP 172.17.101.17, destination IP 10.29.102.15
4534788: .Sep 14 16:07:12: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 191 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:21:5E:ED:64:94, destination mac 00:00:0C:07:AC:65, source IP 172.17.101.54, destination IP 96.0.0.0
4534789: .Sep 14 16:17:13: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 182 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:21:28:4F:A1:9A, destination mac 00:00:0C:07:AC:65, source IP 172.17.101.17, destination IP 10.29.102.15
4534790: .Sep 14 16:27:25: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 183 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:1E:67:00:C5:EA, destination mac 00:00:0C:07:AC:65, source IP 172.17.101.71, destination IP 10.10.10.10
4534791: .Sep 14 16:37:29: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 189 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:21:28:4F:A1:9A, destination mac 00:00:0C:07:AC:65, source IP 172.17.101.17, destination IP 10.29.102.15
4534792: .Sep 14 16:47:52: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 184 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:1A:64:DE:4F:36, destination mac 00:00:0C:07:AC:64, source IP 172.17.101.185, destination IP 172.17.200.11
4534793: .Sep 14 16:58:02: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTEREPLICATED: (Suppressed 187 times)Unable to determine whether to route or bridge replicated software-processed packet with source mac 00:1A:64:DE:4F:36, destination mac 00:00:0C:07:AC:64, source IP 172.17.101.185, destination IP 172.17.200.11
*************************************************************************************
Error Message C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTE:Unable to determine whether to route or bridge replicated software-processed packet with source address [mac-addr] and destination address [mac-addr]
Explanation When a replicated packet is sent to the software by an output ACL, the hardware does not indicate whether the packet needs to be bridged or routed.
When resources are exhausted or when the ACLs programmed in the hardware cannot handle processing directly (such as ACLs matching TCP flags), the Supervisor Engine III sends the packets to software for processing. If the software cannot determine whether to bridge or route, the packet might be dropped. This drop indicates that the packet was directed to a Hot Standby Routing Protocol (HSRP) router group MAC address.
06-02-2016 12:39 AM
There may be an issue with that router and the arp for those macs , that's where the STP is seeing an issue come from the g1/5 interface that's causing confliction and problem with root bridge , have they done or changed something their end
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: