Swport-4-MAC_CONFLICT

[Chandan Singh]

We are facing Swport-4-MAC_CONFLICT:Dynamic mac 001E.49FB.A4FF from Gig1 conflict with SVI ,check Network topology and make sure there is no loop.

WLC 9800 CL 17.9.4 ,AP 2702 (Local mode)

No HA single cloud WLC in ESxi platform server

PFA snap for Reference

Let me know if this is due to loop in network or Bug ,software version is New.

[marce1000]

 - Have a checkup of the WLC 9800 CL  controller configuration with the CLI command show tech wireless and feed the output into :
                                                                                                                                      Wireless Config Analyzer

 M.

[pieterh]

I see multiple interfaces and multiple source addresses in your screenshot
I guess the WLC port configuration does not match the ESXi switch configuration 

Virtual Wireless LAN Controller Deployment Guide 8.2 - Cisco
In ESXi, configure the appropriate networking needed to support vWLC. The recommendation is to use a trunk for Dataport, and an optional access port for the Service Port*, such as the example below:

[marce1000]

 - @pieterh Looks like the document you refer too points to the aireos based vwlc , not the 9800CL , but I align with your options in the sense that I think that the WMI is not correctly configured , 

 M.

[pieterh]

Hi @marce1000 marce1000
thank you for mentioning, I'll pay attention to this ,
I agree it's better to refer a document matching the model in the problem

[JPavonM]

Ensure you use Gi1 for management the box only, Gi2 for production, and Gi3 for HA and allow only the corresponding VLANs.

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-cl-wireless-controller-cloud/nb-06-cat9800-cl-wirel-cloud-dep-guide-cte-en.html#Deployingthe9800CLusingVMwareESXi

Take also care of this workaround when setting promiscous:

https://kb.vmware.com/s/article/59235

[Rich R]

This is also specifically covered in the Best Practices guide - basically G1 and G2 should be on separate virtual switches.  If you make both ports trunks on the same vswitch then you need to make sure both ports cannot see the same VLANs at all.
https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/guide-c07-743627.html#C9800CLconsiderations

[Chandan Singh]

Thank you Everyone for your reply i will check all these options.

[jamshidaslami]

From VMware ESXi, set the promiscuous mode to "Reject" and then change it back to "Accept." This should resolve the issue.

[Rich R]

I very much doubt that would make any difference @jamshidaslami 
This is a well known problem when both WLC ports see the same VLANs and therefore see the same MAC addresses on both ports.
They either have to be on separate virtual switches (best practice) or have the VLANs manually configured to ensure there is no overlap.