MAC address of clients are not showing up in 4500 switch

[joeharb]

We have discovered an odd issue as we have started migrating our wireless from Centrally switched to locally switched.  We are using a template on our switches that is returned by ISE for an authenticated AP, this is working fine across the board for all switches.  We have noticed we are able to observe the wireless clients mac address presented on the same interface as the AP they are associated with on our CAT9300 switches but not on our CAT4500's.  The wireless client works and gets an ip address from DHCP and you can trace the mac address to the CAT4500 but it shows "no entries" when you try to find it directly on the switch.  We have 3 CAT4500's and not all are on the same code and each are having the same issue.  Is there a hidden command to see these, is this related to it being a template?  I have even removed the VLAN for the clients off the template and as expected they lost network access.

If there a better area for the type of question please let me know...

Any suggestions or help would be appreciated.

Thanks,

Joe

[balaji.bandi]

Where is the Layer 3 interface for that VLAN associated, is this on cat 4500 ?

[joeharb]

No it is not. I can see the arp entries on the layer 3 device. In one case the layer is a pair of 7K’s and when I look at arp for a client I see the mac and it shows that mac being learned from 4500.

[balaji.bandi]

In one case the layer is a pair of 7K’s and when I look at arp for a client I see the mac and it shows that mac being learned from 4500.

Can you explain that one case? ( Not sure, but if the Cat 4500 in transit, sure nexus learn MAC address from Cat 4500.(hypothetically).

[joeharb]

Hope this helps:

***ARP entries on 7K for the wireless clients VLAN****

Val_7K_1-Val_7K_Core1# show ip arp vlan 960

Flags: * - Adjacencies learnt on non-active FHRP router
+ - Adjacencies synced via CFSoE
# - Adjacencies Throttled for Glean
D - Static Adjacencies attached to down interface

IP ARP Table
Total number of entries: 9
Address Age MAC Address Interface
10.30.32.3 00:01:55 4055.3922.5142 Vlan960
10.30.32.11 00:00:11 444a.db01.c1ae Vlan960
10.30.32.22 00:06:55 4ceb.bd32.d077 Vlan960
10.30.32.27 00:00:53 868c.1c2e.6c2f Vlan960
10.30.32.30 00:11:17 ba15.866d.fbff Vlan960
10.30.32.55 0.892050 36d5.cf3d.df15 Vlan960
10.30.32.83 00:09:00 d24f.b907.0a64 Vlan960
10.30.32.85 00:00:39 c49d.ed2d.5f51 Vlan960
10.30.32.1 - 0000.0c07.ac0c Vlan960

***Showing where one of the MAC's is learned from***

Val_7K_1-Val_7K_Core1# show mac address-table address 444a.db01.c1ae
Note: MAC table entries displayed are getting read from software.
Use the 'hardware-age' keyword to get information related to 'Age'

Legend:
* - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC
age - seconds since last seen,+ - primary entry using vPC Peer-Link, E - EVPN entry
(T) - True, (F) - False , ~~~ - use 'hardware-age' keyword to retrieve age info
VLAN/BD MAC Address Type age Secure NTFY Ports/SWID.SSID.LID
---------+-----------------+--------+---------+------+----+------------------
* 960 444a.db01.c1ae dynamic ~~~ F F Po210

Val_7K_1-Val_7K_Core1# show running-config interface port-channel 210

!Command: show running-config interface port-channel210
!Time: Fri Oct 29 08:32:40 2021

version 8.2(2)

interface port-channel210
description Connection to ValMDF4510
switchport
switchport mode trunk
vpc 210

****show mac on 4510****

ValMDF4510#show mac address-table address 444a.db01.c1ae
No entries present.

Hope that helps explain what we trying to do...

Joe

[paul driver]

Hello

Curious is the mac- address learning enabled?

mac address-table learning vlan xx
sh mac address-table learning

[joeharb]

Yes it is enabled/not disabled for any vlans

ValMDF4510#show mac address-table learning
Learning disabled on vlans:

Thanks,

Joe