Security features and MAC address table on access switch
Topology: PC <===>Access Switch (C2960)<===> Core Switch C4510 <===> DHCP Server (MS)
Security function on access switch: ip dhcp snooping, no ip dhcp snooping information option, ip arp inspection validate src-mac dst-mac ip allow zeros, ip arp inspection log-buffer entries 1024 , ip arp inspection log-buffer logs 1024 interval 10.
Problem: On the port, the port-security function remembered one PC address. Available for remembering another. A second PC is connected to the access level switch. The port-security function does not see it, it does not appear in the table of mac addresses. There are no errors in the switch logs, the status port is up, the line is up. However, on the DHCP server, it can be seen that the server issues the IP. In this case, the MAC address is needed and the IPs appear on the core switch, but do not appear in the MAC addresses tables on the switch to which the new PC is connected. The PCs were rebooted, waiting for the timeout of the ARP and CAM tables. It only helps to completely disable all the security features on the port. Why does the desired MAC stored on the core switch, but does not appear on the access switch? A problem appears on many access switches when connecting new equipment instead of old or in addition to old. Thank you for your help.
Attached policy provides CLI access to the Cisco 4G router over text messaging. Two files are in the attached .tar file:
2. PDF with instructions on how to load and use the .tcl file.
Introduction to SD-Access Multicast
The document describes the Cisco DNAC UI workflow introduced as part of the Cisco DNA Center1.3.3 release. The document covers the components of Multicast forwarding on SD-Access fabric and the configuration pushed to...
Coming soon - Be the first to know about the New Product/Release Series. Join Customer Connection to register for the briefings throughout the month of October!
Membership in the Cisco Customer Connection program is required to attend. Registra...