When will %SW_MATM-4-MACFLAP_NOTIF: be generated?

[Myky]

Hi guys,

We got this:

We want to understand when the switch marks MAC  "flap"? Is there some sort of timer? 

It s normal for the MAC address to be learned on one port and then another, but I get it's when MAC moves very quickly back switch generates this log entry. What is the logic/timer behind this?

Thanks,

Misha

[David Nolasco · Accepted solution]

Hi,

It might be expected to see MAC move/flap notifications when it comes to wireless as users are moving around.

The MAC-move counter notification generates a syslog message when the number of MAC moves in a VLAN exceeds the maximum limit. The maximum limit is 1000 MAC moves. *** Please refer to specific platform.

What type of devices do you have connected to those ports in the logs?

What is the purpose of vlans 251 and 252?

Regards

David N.

[Myky]

Hi David, 

Thanks for your response!

We got: C9500-48Y4C, version 17.03.03

We know why we got flaps as there was constant failover from active to passive box (Meraki MXs). 
It's a separate issue, for now, I just wanted to understand how those messages get generated, and I think you answered it.

btw, how can I view that setting: sh running-config all | i 1000 or something?

Thanks,

Misha