Ethernet Switches & Routers

Reply
Senior Member
Posts: 1
Registered: ‎08-27-2014

Log message interpretation

Hi,

 

Could anyone explain the following log messages we are seeing on a couple if ICX6450 stacks:

 

Oct 29 15:02:26Smiley Very Happy:next hop router 10.1.1.107 moved from port 5/1/2 to port 2/1/2
Oct 29 15:01:52Smiley Very Happy:next hop router 10.1.1.107 moved from port 1/1/2 to port 5/1/2
Oct 29 15:00:47Smiley Very Happy:next hop router 10.1.1.166 moved from port 5/1/2 to port 2/1/2
Oct 29 14:57:54Smiley Very Happy:next hop router 10.1.1.107 moved from port 6/1/2 to port 1/1/2

 

Both stacks are running routing code and basic layer3 static routing between a couple of vlans. All very simple but not sure if the log messages are a concern as I've never seen them before?

 

Thanks

 

Gavin

Brocadian
Posts: 44
Registered: ‎01-05-2012

Re: Log message interpretation

These are debug messages from your ICX6450 to indicate the system is detecting the learning of the IP from a different port then the one learned previously.

 

These messages, at worse, can fill up your syslog and render the system console to be non-operational.

It is also an indication that there is either a broadcast storm in your network or loops causing mac address movement (being learned) between various ports.

 

You may want to keep an eye on cpu utilization as it can have negatively effect in spiking the cpu when mac enteries, arp entries need to be removed and renewed constantly.

 

Potentially it will also lead to some connectivity issue in the network.

 

Without any knowledge of your topology and connections of ports, it is difficult to say what the cause may be.

You will need to open a case with TAC to have them assist in tracking the source down and resolve.

 

For temporary relieve, you can turnoff debugging in logging to suppress the printing of the message, so at least you can communicate via the system console.

 

To suppress the debugging message being printed.

conf t

no logging buffered debugging

end

Brocadian
Posts: 44
Registered: ‎01-05-2012

Re: Log message interpretation

ct 29 14:57:54:smileyvery-happy::next hop router 10.1.1.107 moved from port 6/1/2 to port 1/1/2

     IP addr 10.1.1.107 was learned on port 6/1/2 and now learned on port 1/1/2

 

Oct 29 15:01:52:smileyvery-happy::next hop router 10.1.1.107 moved from port 1/1/2 to port 5/1/2

    same ip is learned on port 5/12 at 15:01:52

 

Oct 29 15:02:26:smileyvery-happy::next hop router 10.1.1.107 moved from port 5/1/2 to port 2/1/2

    same ip is learned on port 5/12 at 15:01:52

 

So, 10.1.1.107 is "moving" from port 6/1/2 ... to 1/1/2 ... to 5/1/2 ... to 2/1/2

You may want to find out what vlan these ports belongs to to narrow down the fault domain.

chances are these ports may be part of varrious VLANs, that will make the tracking more difficult.

 

 

Oct 29 15:00:47:smileyvery-happy::next hop router 10.1.1.166 moved from port 5/1/2 to port 2/1/2

   IP addr 10.1.1.166 was learned on 5/1/2 and now learned on 2/1/2

 

Based on the addresses they may be of the same IP subnet and VE, for you to focus on the problem.

This appears to be at the least a 6-units ICX6450 stacks !

Join the Community

Get quick and easy access to valuable resource designed to help you manage your Brocade Network.