取消
显示结果 
搜索替代 
您的意思是: 
cancel
8966
查看次数
20
有帮助
9
回复

咨询一个N7K异常日志问题

shanghaiyunji
Level 1
Level 1
最近N7K上报了很多这种日志,是哪里出问题,大哥大姐们帮帮忙分析下,是有环路了么?
2018 Aug 31 16:06:09 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.acfd on Vlan253(port-channel10) is duplicate of local virtual ip,10.20.253.254
2018 Aug 31 16:06:20 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.acfb on Vlan251(port-channel10) is duplicate of local virtual ip,10.20.251.254
2018 Aug 31 16:06:30 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from 0000.0c07.ac05 onVlan5(port-channel10) is duplicate of local virtual ip, 10.20.5.254
2018 Aug 31 16:06:40 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.ac0d on Vlan13(port-channel10) is duplicate of local virtual ip,10.20.13.254
2018 Aug 31 16:06:50 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.ac15 on Vlan21(port-channel10) is duplicate of local virtual ip,10.20.21.254
2018 Aug 31 16:07:00 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.acfc on Vlan252(port-channel10) is duplicate of local virtual ip,10.20.252.254
2018 Aug 31 16:07:11 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.acfe on Vlan254(port-channel10) is duplicate of local virtual ip, 10.20.254.254
2018 Aug 31 16:07:21 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from0000.0c07.ac06 on Vlan6(port-channel10) is duplicate of local virtual ip,10.20.6.254
2018 Aug 31 16:07:31 %ARP-3-DUP_VADDR_SRC_IP: arp [4949] Source address of packet received from 0000.0c07.ac0aon Vlan10(port-channel10) is duplicate of local virtual ip, 10.20.10.254

1 个已接受解答

已接受的解答

suzhouxiaoniu
Spotlight
Spotlight
其实主备一般都是要一致的,不然容易次优链路

在原帖中查看解决方案

9 条回复9

suzhouxiaoniu
Spotlight
Spotlight
其实主备一般都是要一致的,不然容易次优链路

Terence.Jh
Spotlight
Spotlight
这些提示的ip地址是否是一个HSRP的虚拟ip
7K与下行网络设备的NTP是否同步

shanghaiyunji
Level 1
Level 1
terence 发表于 2018-9-20 14:18
这些提示的ip地址是否是一个HSRP的虚拟ip
7K与下行网络设备的NTP是否同步

是HSRP的虚拟地址,NTP应该是同步的,都是指向同一台服务器,之前都没有报错,就最近几天一直报这个日志。

Terence.Jh
Spotlight
Spotlight
shanghaiyunji 发表于 2018-9-20 14:19
是HSRP的虚拟地址,NTP应该是同步的,都是指向同一台服务器,之前都没有报错,就最近几天一直报这个日志 ...

show mac address-table 追踪一下这个MAC是从哪里学习过来的,是不是两台HSRP的主备分别学习过来的
no ip arp gratuitous hsrp duplicate 可以在SVI接口下调用关闭HSRP无偿ARP解析
如果你的7K下联也做了VPC的话 也看下VPC状态吧
这明显是个冗余信息ARP重复解析了,出环不至于,感觉最多次优路径吧

shanghaiyunji
Level 1
Level 1
terence 发表于 2018-9-20 14:35
show mac address-table 追踪一下这个MAC是从哪里学习过来的,是不是两台HSRP的主备分别学习过来的
no ...

那我先查下MAC地址来源,服务器汇聚用N5K的也有做了VPC,VPC状态倒是正常

suzhouxiaoniu
Spotlight
Spotlight
0000.0c07.acfd 这是HSRP的虚拟MAC,后面的FD是组号,253也正好是VLAN号,
这么多的VLAN的HSRP同时报错,检查一下主备情况,
然后看一下主备的HSRP地址是否冲突【如果HSRP有冗余的话】,
然后检查上下游设备是否使用了和HSRP虚拟网关相同的IP地址x.x.x.254
从而导致了地址冲突。

shanghaiyunji
Level 1
Level 1
suzhouxiaoniu 发表于 2018-9-21 09:05
0000.0c07.acfd 这是HSRP的虚拟MAC,后面的FD是组号,253也正好是VLAN号,
这么多的VLAN的HSRP同时报错 ...

前辈不好意思,各了两个多月才回复,可确认的是HSRP地址没有冲突,上下游地址应该也没冲突。
就是有一个疑点不知道是否和这个日志有关:VPC的主备和HSRP主备以及STP主备是不一致的。

nexusNXOS57758
Spotlight
Spotlight
suzhouxiaoniu 发表于 2018-9-20 13:21
其实主备一般都是要一致的,不然容易次优链路

我的n9k也报这个错误,能具体解释一下么,两台N9K做VPC 他们hsrp 虚拟的网关都报这个错误。目前VPC正常 都在线。
2020 Nov 24 17:12:37 C9332C_FIWO_Core_66.0.2 %ARP-3-DUP_VADDR_SRC_IP: arp [29084] Source address of packet received from 0000.0c07.a
c01 on Vlan1(port-channel1) is duplicate of local virtual ip, 10.66.0.1
2020 Nov 24 17:04:03 C9332C_FIWO_Core_66.0.2 %ARP-3-DUP_VADDR_SRC_IP: arp [29084] Source address of packet received from 0000.0c07.a
c03 on Vlan402(port-channel1) is duplicate of local virtual ip, 10.66.4.1
配置为
Interface Grp Prio P State Active addr Standby addr Group addr
Vlan1 1 180 P Active local 10.66.0.3 10.66.0.1 (conf)
Vlan400 2 180 P Active local 10.66.2.3 10.66.2.1 (conf)
Vlan402 3 180 P Active local 10.66.4.3 10.66.4.1 (conf)
vPC domain id : 1
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : success
vPC role : primary, operational secondary
Number of vPCs configured : 5
Peer Gateway : Disabled
Dual-active excluded VLANs : -
Graceful Consistency Check : Enabled
Auto-recovery status : Disabled
Delay-restore status : Timer is off.(timeout = 30s)
Delay-restore SVI status : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router : Disabled
Virtual-peerlink mode : Disabled
vPC Peer-link status
---------------------------------------------------------------------
id Port Status Active vlans
-- ---- ------ -------------------------------------------------
1 Po1 up 1,400,402
vPC status
----------------------------------------------------------------------------
Id Port Status Consistency Reason Active vlans
-- ------------ ------ ----------- ------ ---------------
1 Po10 up success success 1,400

2 Po11 up success success 1,402

3 Po12 up success success 1,402

4 Po13 up success success 1,402

5 Po14 up success success 1,402

shimingbu7385
Level 1
Level 1

当时有没有注意hsrp的一个状态是否正常?

入门指南

使用上面的搜索栏输入关键字、短语或问题,搜索问题的答案。

我们希望您在这里的旅程尽可能顺利,因此这里有一些链接可以帮助您快速熟悉思科社区:









快捷链接