7 Replies Latest reply on Jan 11, 2016 9:04 AM by pratikmehta003

    Need help on alerting when MAC address flaps between interfaces/ports

    pratikmehta003

      Hi all,

       

      I did have a look around on few threads which were related to this but very old and not conclusive.

       

      So here is the request from Network Team:

       

      Need to detect this: %SW_MATM-4-MACFLAP_NOTIF:


      Description given by them:

      The type of messages indicates that Catalyst switch has learned a MAC address that already exists in the content-addressable memory (CAM) table, on

      a port other than the original one. This behavior repeatedly occurs over short periods of time, which means that there is address flapping between ports..

      If the message appears for multiple MAC addresses, the behavior is not normal. This behavior indicates a possible network problem because the MAC addresses

      move quickly from one port to another port before the default aging time. The problem can be looping traffic on the network. Typical symptoms include:

       

      High CPU utilization

      Slow traffic throughout the network

      High backplane utilization on the switch