Wired Intelligent Edge

 View Only
  • 1.  port flapping detection

    Posted Apr 13, 2022 08:36 AM
      |   view attached

    Hello,

    I'm facing the issue that some Ports are Flapping – they go up and down within a Minute randomly as you can see in the Log.

     

    2022-04-13T09:37:41.322405+02:00 SX-ALPH-E01A-1 intfd[706]: Event|403|LOG_INFO|UKWN|1|Link status for interface 1/1/27 is up

    2022-04-13T09:37:38.006012+02:00 SX-ALPH-E01A-1 ops-switchd[671]: Event|2110|LOG_INFO|MSTR|1|Deleted Mac based VLAN entry for 00:07:cc:1b:71:be with VLAN 3999 on port 1/1/27

    2022-04-13T09:37:37.925045+02:00 SX-ALPH-E01A-1 intfd[706]: Event|404|LOG_INFO|UKWN|1|Link status for interface 1/1/27 is down

    2022-04-13T09:36:23.800271+02:00 SX-ALPH-E01A-1 port-accessd[3892]: Event|10503|LOG_INFO|MSTR|1|Port 1/1/27 is unblocked by port-access

    2022-04-13T09:36:23.756369+02:00 SX-ALPH-E01A-1 ops-switchd[671]: Event|2108|LOG_INFO|MSTR|1|Created Mac based VLAN entry. VLAN 3999 is mapped to client 00:07:cc:1b:71:be on port 1/1/27

    2022-04-13T09:36:23.325601+02:00 SX-ALPH-E01A-1 port-accessd[3892]: Event|10502|LOG_INFO|MSTR|1|Port 1/1/27 is blocked by port-access

    2022-04-13T09:36:23.302534+02:00 SX-ALPH-E01A-1 intfd[706]: Event|403|LOG_INFO|UKWN|1|Link status for interface 1/1/27 is up

    2022-04-13T09:36:19.979519+02:00 SX-ALPH-E01A-1 ops-switchd[671]: Event|2110|LOG_INFO|MSTR|1|Deleted Mac based VLAN entry for 00:07:cc:1b:71:be with VLAN 3999 on port 1/1/27

    2022-04-13T09:36:19.911511+02:00 SX-ALPH-E01A-1 intfd[706]: Event|404|LOG_INFO|UKWN|1|Link status for interface 1/1/27 is down

     

    022-04-13T09:18:22.746089+02:00 SX-ALPH-E01A-1 intfd[706]: Event|403|LOG_INFO|UKWN|1|Link status for interface 1/1/27 is up

    2022-04-13T09:18:19.359444+02:00 SX-ALPH-E01A-1 port-accessd[3892]: Event|10503|LOG_INFO|MSTR|1|Port 1/1/27 is unblocked by port-access

    2022-04-13T09:18:19.328325+02:00 SX-ALPH-E01A-1 intfd[706]: Event|404|LOG_INFO|UKWN|1|Link status for interface 1/1/27 is down

    2022-04-13T09:18:12.932293+02:00 SX-ALPH-E01A-1 port-accessd[3892]: Event|10502|LOG_INFO|MSTR|1|Port 1/1/27 is blocked by port-access

    2022-04-13T09:18:12.910716+02:00 SX-ALPH-E01A-1 intfd[706]: Event|403|LOG_INFO|UKWN|1|Link status for interface 1/1/27 is up

    2022-04-13T09:18:09.861147+02:00 SX-ALPH-E01A-1 ops-switchd[671]: Event|2110|LOG_INFO|MSTR|1|Deleted Mac based VLAN entry for 00:07:cc:1b:71:be with VLAN 3999 on port 1/1/27

    2022-04-13T09:18:09.790745+02:00 SX-ALPH-E01A-1 intfd[706]: Event|404|LOG_INFO|UKWN|1|Link status for interface 1/1/27 is down

     

    Mostly to replace the Patch cable helps. Or does someone have any other cluse why this happened?

    But if the Device on the End it not Monitored there is no way to act active against this issue.

    Is there a way to get informed if a port is flapping "down and up within a minute" with Airwave or any other Tool or Script?

     

    The Switch is a 6300M 48SR5 CL6 PoE 4SFP56 Swch software version FL.10.07.0061

     

     

    Many thanks



    ------------------------------
    Thomas Odermatt
    ------------------------------

    Attachment(s)

    txt
    Port.txt   161 KB 1 version


  • 2.  RE: port flapping detection

    Posted Apr 13, 2022 08:54 AM
    Hello Thomas,

    You may use SNMP traps please check the following guide on p.9:

    https://www.arubanetworks.com/techdocs/AOS-CX/10.08/PDF/snmp_mib.pdf

    AOS-CX 10.08 SNMP/MIB Guide

    Link-up and link-down traps

    Standard IF-MIB link-up and link-down traps will be sent on link-state change when an interface is
    configured using trap link-status or when user_config:link_state_snmp_trap is set to true. The trap
    sends the current information for ifindex, admin status, operational status, and interface name.
    Link up trap OID: 1.3.6.1.6.3.1.1.5.4
    Link down trap OID: 1.3.6.1.6.3.1.1.5.3

    Hope this helps!

    ------------------------------
    -Alex-
    ------------------------------



  • 3.  RE: port flapping detection
    Best Answer

    Posted Apr 14, 2022 02:26 AM
    Edited by Thomas Jul 19, 2022 07:23 AM
    Hello, 

    Please have a look at  chapter Fault Monitor on page 221. This may be helpful for monitoring certain link errors.
    https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-7885.pdf

    The features monitors for such events and if the configurable thresholds are exceeded it can take action - notify (creating logs and sending SNMP traps) by default or notify-and-disable (log and SNP trap + temporarily disabling the affected port)

    ------------------------------
    Emil Gogushev
    ------------------------------



  • 4.  RE: port flapping detection

    Posted Apr 14, 2022 02:47 AM

    Hello Emil,

    Thank you very much. That looks very good. I'll check this.

    Best Regards



    ------------------------------
    Thomas Odermatt
    ------------------------------