[c-nsp] MAC 00000000

Konstantin Barinov sbr at infonet.ee
Mon Mar 14 12:32:10 EST 2005


Hi,

Any idea, how to detect and disable lusers like this?

This is Cat 4000, showing messages below.

There are Cats 2950 and other switches downstream, who keep silence
about users with mac 00000. Also no switches have mac 000000 in their
mac-address tables (yes, they should not have it).


2005 Mar 14 18:45:06 EET +02:00 %SYS-4-P2_WARN: 1/Host 00:00:00:00:00:00 is flapping between port 3/2 and port 2/32
2005 Mar 14 18:45:23 EET +02:00 %SYS-4-P2_WARN: 1/Host 00:00:00:00:00:00 is flapping between port 2/32 and port 3/2
2005 Mar 14 18:45:38 EET +02:00 %SYS-4-P2_WARN: 1/Host 00:00:00:00:00:00 is flapping between port 3/2 and port 2/32
2005 Mar 14 18:45:51 EET +02:00 %SYS-4-P2_WARN: 1/Host 00:00:00:00:00:00 is flapping between port 2/32 and port 3/2
2005 Mar 14 18:46:07 EET +02:00 %SYS-4-P2_WARN: 1/Host 00:00:00:00:00:00 is flapping between port 2/32 and port 3/2
2005 Mar 14 18:46:23 EET +02:00 %SYS-4-P2_WARN: 1/Host 00:00:00:00:00:00 is flapping between port 2/32 and port 3/2
2005 Mar 14 18:46:39 EET +02:00 %SYS-4-P2_WARN: 1/Host 00:00:00:00:00:00 is flapping between port 2/32 and port 3/2
2005 Mar 14 18:46:53 EET +02:00 %SYS-4-P2_WARN: 1/Host 00:00:00:00:00:00 is flapping between port 2/32 and port 3/2
2005 Mar 14 18:47:08 EET +02:00 %SYS-4-P2_WARN: 1/Host 00:00:00:00:00:00 is flapping between port 3/2 and port 2/32
2005 Mar 14 18:47:22 EET +02:00 %SYS-4-P2_WARN: 1/Host 00:00:00:00:00:00 is flapping between port 2/32 and port 3/2




br
--
Konstantin Barinov
INFONET AS, Tallinn, Estonia



More information about the cisco-nsp mailing list