05-03-2017 06:37 AM
Every so often I see alerts in Airwave that include detail messages like this:
Flushing mac-addresses on GE<#> vlan-id <vlan> due to STP topology change
I'm not sure how to interpret this message since I'm not aware of any STP topology change having taken place.
Anyone have an insight on this?
05-03-2017 07:49 AM
Incident happend almost most one month back i.e on 4th April and it very difficult to trace out whether really their is really change in topology on controller/switch (ORHS-IDF_A-1)reported VLANs, those logs might got flushed out by now on device.
05-04-2017 01:56 AM - edited 05-04-2017 02:01 AM
Airwave tigger alert based on device events which it received, could you check the ORHS-IDF_A-1 device AMP device events and Device events section in APs/Device>Montior page whether any entry related to topology change during the time when airwave triggered alert, if we have log entries then I would recommand to open AOS TAC to look in to this issue on device side.
05-04-2017 11:13 AM
Syslog is sent from that particular device, I would recommand to open AOS TAC ticket to look in to this issue. In Airwave we cant do much on this issue, since syslog triggered from device based on this Airwave triggered alert.
If my post address your query, give kudos:)
05-18-2017 06:41 PM
I've troubleshooted alot of STP issues in the past.
Just to share my experience, I've encountered multiple TCN (Topology Change Notifications), and I've traced based on the ports that initiated the TCN. In this ocassion, I've access 3 to 4 switches and traced the TCN source to an access port on VLAN 2 was wrongly connected to a port in VLAN 8 connected to a Cisco switch running PVST. Unexpected results cause TCN constantly being alerted.
So, I'm curious, where does this port GE1/0/46 go to? A workstation/server, another switch? If it is a switch, can you check if there is a TCN there too?