INVALIDSOURCEADDRESSPACKET error on Switch

[subhojithalder198]

                  Hi,

We are getting following error messages on one of our core swtiches

55248: Aug 24 02:09:41.226 UTC: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 6873 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Gi2/5 in vlan 123

255249: Aug 24 08:09:36.835 UTC: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 6999 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Gi2/5 in vlan 123 

That Gi2/5 port connected to access switch but in access switch we don't have any logs

Already gone through with this link

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=cscto67828

But not be able to get info how to start the trtoubleshooting.

Thanks/

Subhojit

[Dmytro Skotnikov]

Hello subhojit halder,

If you are running the IOS with integrated CSCto67828 fix, which allows you to configure a static drop entry for invalid MAC 0.0.0 then it's possible to limit CPU hit by these frames:

# mac address-table static 0.0.0 vlan 123 drop

Since it's hard to trace frames with invalid 0.0.0 MAC address the only way to find out the source is to bring down the interfaces in VLAN 123 on the access switch one by one till the the message disappear.

-- 
Best regards,
Dmitry Skotnikov

[subhojithalder198]

Hi,

Thanks for your reply, In our case switch version is 12.2(50)SG3 as per Bug details same has been affected by the BUG.

I am looking for some info regarding this

If we upgrade this to SG9 which is mentioning as Fix, after upgrade , If we configure "

mac address-table static 0.0.0 vlan 123 drop" command, in that case drop will be done on Hardware rather that software( currently dropping done in Software which is also increasing CPU Utilization)

Pls correct me if my understanding is wrong.

Br/Subhojit

[Dmytro Skotnikov]

Hello Subhojit,

You are absolutely correct with static drop entry frames will be droped in hardware. Enchancement for

CSCto67828 has been integrated starting 12.2(53)SG7 onwards. You may evalute the migration toward 12.2(53)SG throttle in order to apply mentioned cli command.

-- 
Best regards,
Dmitry Skotnikov