Re: [f-nsp] ICX 6610 not learning mac addresses any more
"Frank Bulk" <[email protected]> Fri, 15 Sep 2023 12:11:20 -0500
| Newsgroups | gmane.network.nsp.foundry |
|---|---|
| Message-ID | <[email protected]> |
This is a multipart message in MIME format. --===============3454797443351028548== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0005_01D9E7CD.BD023250" Content-Language: en-us This is a multipart message in MIME format. ------=_NextPart_000_0005_01D9E7CD.BD023250 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable The first thought that comes to mind is that there is a MAC address = table hash issue. =20 This vendor does a good job of explaining it: = https://www.calix.com/content/dam/calix/mycalix-misc/lib/iae/exa/m/eanepg= /index.htm?toc10152651.htm?101585.htm =20 Frank=20 =20 From: foundry-nsp <[email protected]> On Behalf Of = Tudor Capatina Sent: Thursday, September 14, 2023 8:04 AM To: [email protected] Subject: [f-nsp] ICX 6610 not learning mac addresses any more =20 Hey there =20 got a weird issue on the above mentioned switches and wondering if = anyone has seen something similar.=20 A server with mac-add MAC1 is connected to an ICX 6610 SW1. The server = is generating traffic. SW1 has a mac-add table of around 10k: Total active entries from all ports =3D 10368 And it does not learn MAC1. However SW1 is connected to another ICX SW2 = with a smaller mac-address table (5k) which learns MAC1 from the link to = SW1. The problem is that SW1 will treat all traffic to MAC1 as unknown = unicast and flood it on all it's ports. The issue is not with a specific = mac-address but with several. Mac learning timers are default all over the place. Mac learning is not = disabled anywhere.=20 =20 I was suspecting some cam profile but cannot see such an option on these = devices.=20 In theory there should be space to allow learning of more mac-addresses: =20 show default values sys log buffers:50 mac age time:300 sec telnet sessions:5 = =20 System Parameters Default Maximum Current =20 - - - - =20 mac 32768 32768 32768 =20 =20 Any ideas are welcome=20 =20 Thanks Tudor =20 =20 =20 =20 =20 Links contained in this email have been replaced. If you click on a link = in the email above, the link will be analyzed for known threats. If a = known threat is found, you will not be able to proceed to the = destination. If suspicious content is detected, you will see a warning. ------=_NextPart_000_0005_01D9E7CD.BD023250 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta = http-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8"><meta = name=3DGenerator content=3D"Microsoft Word 15 (filtered = medium)"><style><!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} @font-face {font-family:Verdana; panose-1:2 11 6 4 3 5 4 4 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; font-size:11.0pt; font-family:"Calibri",sans-serif;} a:link, span.MsoHyperlink {mso-style-priority:99; color:#0563C1; text-decoration:underline;} span.EmailStyle18 {mso-style-type:personal-reply; font-family:"Calibri",sans-serif; color:windowtext;} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt; mso-ligatures:none;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--></head><body lang=3DEN-US = link=3D"#0563C1" vlink=3D"#954F72" style=3D'word-wrap:break-word'><div = class=3DWordSection1><p class=3DMsoNormal>The first thought that comes = to mind is that there is a MAC address table hash = issue.<o:p></o:p></p><p class=3DMsoNormal><o:p> </o:p></p><p = class=3DMsoNormal>This vendor does a good job of explaining it: <a = href=3D"https://www.calix.com/content/dam/calix/mycalix-misc/lib/iae/exa/= m/eanepg/index.htm?toc10152651.htm?101585.htm">https://www.calix.com/cont= ent/dam/calix/mycalix-misc/lib/iae/exa/m/eanepg/index.htm?toc10152651.htm= ?101585.htm</a><o:p></o:p></p><p = class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>Frank = <o:p></o:p></p><p class=3DMsoNormal><o:p> </o:p></p><div><div = style=3D'border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in = 0in 0in'><p class=3DMsoNormal><b>From:</b> foundry-nsp = <[email protected]> <b>On Behalf Of </b>Tudor = Capatina<br><b>Sent:</b> Thursday, September 14, 2023 8:04 = AM<br><b>To:</b> [email protected]<br><b>Subject:</b> [f-nsp] = ICX 6610 not learning mac addresses any = more<o:p></o:p></p></div></div><p = class=3DMsoNormal><o:p> </o:p></p><div><div><p = class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>Hey = there<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'><o:p> </= o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>got a weird = issue on the above mentioned switches and wondering if anyone has seen = something similar. <o:p></o:p></span></p></div><div><p = class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>A server = with mac-add MAC1 is connected to an ICX 6610 SW1. The server is = generating traffic. SW1 has a mac-add table of around = 10k:<o:p></o:p></span></p></div><div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>Total active = entries from all ports =3D 10368<o:p></o:p></span></p><div><p = class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>And it does = not learn MAC1. However SW1 is connected to another ICX SW2 with a = smaller mac-address table (5k) which learns MAC1 from the link to = SW1.<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>The problem = is that SW1 will treat all traffic to MAC1 as unknown unicast and flood = it on all it's ports. The issue is not with a specific mac-address but = with several.<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>Mac learning = timers are default all over the place. Mac learning is not disabled = anywhere. <o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'><o:p> </= o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>I was = suspecting some cam profile but cannot see such an option on these = devices. <o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>In theory = there should be space to allow learning of more = mac-addresses:<o:p></o:p></span></p></div><div><p = class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'><o:p> </= o:p></span></p></div><div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>show default = values<br>sys log = buffers:50 mac age = time:300 sec telnet = sessions:5 <br><br>System = Parameters Default = Maximum Current <br>- - - - = = <br>mac = 32768 = 32768 32768 = <o:p></o:p></span></p><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'><o:p> </= o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>Any ideas = are welcome <o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'><o:p> </= o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>Thanks<o:p></= o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'>Tudor<o:p></o= :p></span></p></div></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'><o:p> </= o:p></span></p></div></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'><o:p> </= o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'><o:p> </= o:p></span></p></div></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'><o:p> </= o:p></span></p></div></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Verdana",sans-serif'><o:p> </= o:p></span></p></div></div><p class=3DMsoNormal><br><br>Links contained = in this email have been replaced. If you click on a link in the email = above, the link will be analyzed for known threats. If a known threat is = found, you will not be able to proceed to the destination. If suspicious = content is detected, you will see a = warning.<o:p></o:p></p></div></body></html> ------=_NextPart_000_0005_01D9E7CD.BD023250-- --===============3454797443351028548== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ foundry-nsp mailing list [email protected] http://puck.nether.net/mailman/listinfo/foundry-nsp --===============3454797443351028548==--