cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
586
Views
0
Helpful
2
Replies

Nexus 7k SUP 2 not learning Dynamic MAC addresses from downstream 7k

Beazle
Level 1
Level 1

We have a pair of Nexus 7010s acting as our border leaf nodes running Fabricpath with a VPC+ between each other. Each 7010 connects back to multiple Nexus 7004s via a VPC port-channel that we use for our distribution switches. We recently moved our 7004s off of Fabricpath and back to classical ethernet utilizing the VPC port-channels and now we no longer learn dynamic MAC addresses in the 7010 MAC tables coming from the 7004s. We can see the MAC addresses when checking the ARP table, but our dynamic MAC tables are empty. However the 7004s are able to learn dynamic MAC addresses from the 7010s. 

Traffic works, but we have some concern that because the MAC addresses are not in the MAC table, the 7010s may constantly have to flood the networks to find destination hosts. 

We are running software 8.4(6a) on each of the 7ks. 

Has anyone ever seen anything like this before or have any idea what could be causing this issue? 

2 Replies 2

marce1000
VIP
VIP


 - The problem might be  due to the fact that the Nexus 7010s are still expecting to learn dynamic MAC addresses using Fabricpath, even though the 7004s are now using classical ethernet. This is because the 7010s are not aware that the 7004s have been changed to classical ethernet.

To fix this issue, you need to clear the MAC address table on the 7010s and then re-enable MAC learning. You can do this by running the following commands:

clear mac address-table
spanning-tree vlan 1-4094 forward

Once you have cleared the MAC address table and re-enabled MAC learning, the 7010s should start learning dynamic MAC addresses from the 7004s.

You can also check the following syslog messages to see if there are any errors related to MAC learning:

%L2FM-5-MAC_MOVE: MAC move detected for VLAN 100 from interface Ethernet1/1 to interface Ethernet1/2
%L2FM-5-MAC_LEARN_DISABLED: MAC learning disabled for VLAN 100 due to MAC move storm

If you see any of these messages, it means that MAC learning is being disabled on the 7010s due to a MAC move storm. This can happen if there are a lot of MAC moves in a short period of time. To prevent this, you can configure the mac move notification command to be logged at level 5. This will generate a syslog message for each MAC move, which will help you to identify the source of the problem.

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

@marce1000 

The spanning-tree vlan 1-4094 forward command is not an option on the nexus 7010. Any of thoughts on how to re-enable MAC learning? 

(config)# spanning-tree vlan 1-3967 ?
<CR>
, Multi range separator
forward-time Set the forward delay for the spanning tree
hello-time Set the hello interval for the spanning tree
max-age Set the max age interval for the spanning tree
priority Set the bridge priority for the spanning tree
root Configure switch as root

Appreciate your help!

Review Cisco Networking for a $25 gift card