概述
本文档旨在帮助了解错误消息的原因并进行补救。
2013 Oct 25 15:23:17 N7K %ARP-3-DUP_VADDR_SRC_IP_PROBE: arp [4650] Duplicate address Detected. Probe packet received from 34bd.c8a3.ce30 on Vlan99(port-channel46) with destination set to our local Virtual ip, 10.10.10.1
2013 Oct 25 15:23:35 N7K %ARP-3-DUP_SRC_IP_PROBE: arp [4650] Duplicate address Detected. Probe packet received from 34bd.c8a3.ce30 on Vlan109(port-channel46) with destination set to our local ip, 10.10.10.2
[an error occurred while processing this directive]
什么是ARP探测?
ARP探测是使用全零发送方IP地址构建的ARP请求。该术语用于IPv4地址冲突检测规范(RFC 5227)。 在开始使用IPv4地址(无论是通过手动配置、DHCP还是其他方式接收)之前,实施此规范的主机必须通过广播ARP探测数据包来测试该地址是否已在使用。[8]
故障排除
这些ARP探测功能由属于该VLAN中没有SVI的交换机的Mac地址发送。
经进一步调查,这些是运行IP设备跟踪功能的IOS设备发送的ARP探测数据包。
以下是数据包的Ethanalyzer捕获示例:
N7K# ethanalyzer local interface inband capture-filter "ether src 34:bd:c8:a3:ce:30 and arp and host 10.10.10.2" detail
Capturing on inband
Frame 1 (60 bytes on wire, 60 bytes captured)
Arrival Time: Oct 25, 2013 15:28:59.577664000
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 60 bytes
Capture Length: 60 bytes
[Frame is marked: False]
[Protocols in frame: eth:arp]
Ethernet II, Src: 34:bd:c8:a3:ce:30 (34:bd:c8:a3:ce:30), Dst: c0:62:6b:ae:03:c1 (c0:62:6b:ae:03:c1)
Destination: c0:62:6b:ae:03:c1 (c0:62:6b:ae:03:c1)
Address: c0:62:6b:ae:03:c1 (c0:62:6b:ae:03:c1)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: 34:bd:c8:a3:ce:30 (34:bd:c8:a3:ce:30)
Address: 34:bd:c8:a3:ce:30 (34:bd:c8:a3:ce:30)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: ARP (0x0806)
Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (request)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (0x0001)
[Is gratuitous: False]
Sender MAC address: 34:bd:c8:a3:ce:30 (34:bd:c8:a3:ce:30)
Sender IP address: 0.0.0.0 (0.0.0.0)
Target MAC address: c0:62:6b:ae:03:c1 (c0:62:6b:ae:03:c1)
Target IP address: 10.10.10.2 (10.10.10.2)
[an error occurred while processing this directive]
解决方法
IP设备跟踪功能现在在某些IOS交换机中默认启用
要解决此问题,您可以在从这些设备到nexus的物理接口上禁用IPDT:
注意:这无法全局禁用,必须按接口完成。 如果这是端口通道,则应在端口通道逻辑接口上而不是物理接口上配置。
IOSswitch(config)# no ip device tracking
% IP device tracking is disabled at the interface level by removing the relevant configs
IOSswitch(config)# interface gi1/0/1
IOSswitch(config-if)# ip device tracking maximum 0
IOSswitch(config-if)# end
[an error occurred while processing this directive]
在带3.2.3SE的3850上,以下配置将禁用该功能:
3850(config)# interface gi1/0/1
3850(config-if)# ip device tracking maximum 1
3850(config-if)# NMSP attach suppress
3850(config-if)# end
3850# wr mem
[an error occurred while processing this directive]
在带3.3.3SE的3850上,以下配置将禁用该功能(ip device tracking max 0 now works):
3850(config)# interface gi1/0/1
3850(config-if)# ip device tracking maximum 0
3850(config-if)# NMSP attach suppress
3850(config-if)# end
3850# wr mem
[an error occurred while processing this directive]
引用错误
CSCud96554抑制系统日志%ARP-3-DUP_VADDR_SRC_IP_PROBE
CSCul20441抑制6.2(2)中的系统日志%ARP-3-DUP_VADDR_SRC_IP_PROBE