Host 02:01:00:00:00:00 is flapping

Hi All,
Following are  cat4006 production switch lops:-
Jun 11 04:31:17.666 IST: %C4K_EBM-4-HOSTFLAPPING: Host 02:01:00:00:00:00 in vlan 2 is flapping between port Fa2/42 and port Fa2/44
.Jun 11 04:31:47.664 IST: %C4K_EBM-4-HOSTFLAPPING: Host 02:01:00:00:00:00 in vlan 2 is flapping between port Fa2/42 and port Fa2/44
.Jun 11 04:32:17.663 IST: %C4K_EBM-4-HOSTFLAPPING: Host 02:01:00:00:00:00 in vlan 2 is flapping between port Fa2/42 and port Fa2/44
.Jun 11 04:33:17.665 IST: %C4K_EBM-4-HOSTFLAPPING: Host 02:01:00:00:00:00 in vlan 2 is flapping between port Fa2/42 and port Fa2/44
.Jun 11 04:33:47.664 IST: %C4K_EBM-4-HOSTFLAPPING: Host 02:01:00:00:00:00 in vlan 2 is flapping between port Fa2/42 and port Fa2/44
Cat4006#
As I checked on both Interface, server's are connected and switch end Interface is already configured with full duplex and speed 100.
Kindly suggest, whether it is duplex mismatch issue or any other issue from server load balacer.

Hi All,Following are  cat4006 production switch lops:-Jun
11 04:31:17.666 IST: %C4K_EBM-4-HOSTFLAPPING: Host 02:01:00:00:00:00 in
vlan 2 is flapping between port Fa2/42 and port Fa2/44
.Jun 11
04:31:47.664 IST: %C4K_EBM-4-HOSTFLAPPING: Host 02:01:00:00:00:00 in
vlan 2 is flapping between port Fa2/42 and port Fa2/44
.Jun 11
04:32:17.663 IST: %C4K_EBM-4-HOSTFLAPPING: Host 02:01:00:00:00:00 in
vlan 2 is flapping between port Fa2/42 and port Fa2/44
.Jun 11
04:33:17.665 IST: %C4K_EBM-4-HOSTFLAPPING: Host 02:01:00:00:00:00 in
vlan 2 is flapping between port Fa2/42 and port Fa2/44
.Jun 11
04:33:47.664 IST: %C4K_EBM-4-HOSTFLAPPING: Host 02:01:00:00:00:00 in
vlan 2 is flapping between port Fa2/42 and port Fa2/44
Cat4006#As
I checked on both Interface, server's are connected and switch end
Interface is already configured with full duplex and speed 100.Kindly suggest, whether it is duplex mismatch issue or any other issue from server load balacer.
Hi,
As Leo suggested check out the nic teaming from server side and as per the logs also it seem server nic ports both are connected with same switch and in active mode from server side,if teaming is configured in active/active mode configure in active/passive mode and see the results or configure a etherchannel from switch end for both the ports.
Hope to Help !!
Ganesh.H
Remember to rate the helpful post

Similar Messages

  • %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa2/0/46.....

    Hi Guys,
    Iam seeing above issue on two of my switches connected to core switch ....i know there are quite of few discussion open on same issue but mine is diff....
    i see same issue on two switches connected via core swicth on same vlan ( 112)....when i do mac address lookup it says the mac thats generating this error is invalid so cant track the source of this mac....also just saw on topoogy change notification on core traced it back to originating switch which is also generating this error but dnt see any change on the switch that is generated topology change notification....prob is vlan 112 all interface on both switches conected via core are generating this message so five interfaces each .....any expert advise on how to approach it as i cant get to source port generating this as nearly five ports in vlan 112 on bloth switches generating this error. thanks
    Apr 15 15:56:08: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa3/0/46 and port Gi3/0/1
    Apr 15 15:56:50: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
    Apr 15 15:56:51: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa3/0/46 and port Gi3/0/1
    Apr 15 15:58:29: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
    Apr 15 15:59:27: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa2/0/46
    Apr 15 15:59:45: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
    Apr 15 16:00:14: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa3/0/46
    Apr 15 16:00:36: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
    Apr 15 16:02:40: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa3/0/46 and port Gi3/0/1
    Apr 15 16:03:22: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa3/0/46 and port Gi3/0/1
    Apr 15 16:03:31: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa2/0/46
    Apr 15 16:04:03: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa3/0/46 and port Gi3/0/1
    Apr 15 16:04:34: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
    Apr 15 16:04:41: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa2/0/46
    Apr 15 16:05:05: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
    Apr 15 16:05:13: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa3/0/46
    sh spanning-tree vlan 112
    VLAN0112
      Spanning tree enabled protocol rstp
      Root ID    Priority    8192
                 Address     001e.13c1.5a70
                 Cost        3004
                 Port        109 (GigabitEthernet3/0/1)
                 Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec
      Bridge ID  Priority    49264  (priority 49152 sys-id-ext 112)
                 Address     001f.261c.1d80
                 Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec
                 Aging Time 300
      UplinkFast enabled but inactive in rapid-pvst mode
    Interface        Role Sts Cost      Prio.Nbr Type
    Fa2/0/46         Desg FWD 3019      128.104  P2p
    Fa1/0/46         Desg FWD 3019      128.50   P2p
    Gi3/0/1          Root FWD 3004      128.109  P2p
    Fa3/0/46         Desg FWD 3019      128.158  P2p
    Fa3/0/47         Desg FWD 3100      128.159  P2p
    Fa3/0/48         Desg FWD 3019      128.160  P2p

    ASAK Mohammed,
    There are lots of thread discussing about this, you should do a search before creating a new post.
    Anyway, this is how you approach these types of flapping:
    1. Is the the given MAC flapping in the log flapping only 1 time or you see it multiple times over a reasonobly short time?
       If you see it only once or once every 2-3 hours this might be not an  issue worth being investigated. Sporadic one time flapping are expected  in L2 broadcast domain.
    If you see it often continue to step 2.
    2. Identify and locate the flapping mac in vlan 125: 3270.990a.a504
    Is  the mac of a dual-homes server using some kind of load balancing  algorithm (active/active) for which the same address is used from both  NICs?
    If yes, the message is not and issue but just an indication.  Fix this type of LB (make it active/standby or make sure the server  uses 2 different mac addresses, one per NIC) or if it is not possible  leave it like this.
    3. Is the MAC a the wireless NIC of a PC?
    Make sure that the user was not moving from one AP to another (flapping is normal in this case)
    4.
    See if you have increasing TCN's and check if they are coming from the same interface.
    From  this point on you keep on troubleshooting STP until you find the  offending link (likely going up and down) or the switch. You also need  to check if STP in vlan112 is coherent with the actual L2 topology you  have.
    =====================================================
    2- Some more details information which might be helpfull to you.
    http://www.cisco.com/en/US/products/hw/switches/ps663/products_tech_note09186a
    00801434de.shtml#subtopic1k
    Problem
    The switch generates %SYS-3-P2_ERROR: Host xx:xx:xx:xx:xx:xx is flapping
    between ports? messages, where xx:xx:xx:xx:xx:xx is a MAC address.
    Description
    This example shows the console output that you see when this error occurs:
    %SYS-4-P2_WARN: 1/Host 00:50:0f:20:08:00 is flapping between port 1/2 and port
    4/39
    Use the steps and guidelines in this section in order to understand and
    troubleshoot the cause of this error message.
    The message indicates that your Catalyst 4500/4000 switch has learned a MAC
    address that already exists in the content-addressable memory (CAM) table, on
    a port other than the original one. This behavior repeatedly occurs over short
    periods of time, which means that there is address flapping between ports..
    If the message appears for multiple MAC addresses, the behavior is not normal.
    This behavior indicates a possible network problem because the MAC addresses
    move quickly from one port to another port before the default aging time. The
    problem can be looping traffic on the network. Typical symptoms include:
    ·        High CPU utilization
    ·        Slow traffic throughout the network
    ·        High backplane utilization on the switch
    For information on how to identify and troubleshoot issues with spanning tree,
    refer to Spanning Tree Protocol Problems and Related Design Considerations
    <http://www.cisco.com/en/US/tech/tk389/tk621/technologies_tech_note09186a00800
    951ac.shtml> .
    If the error message appears for one or two MAC addresses, locate these MAC
    addresses in order to determine the cause. Issue the show cam mac_addr command
    in order to identify from where these MAC addresses have been learned. In this
    command, mac_addr is the MAC address that the error reports as flapping.
    After you determine between which ports this MAC address is flapping, track
    down the MAC address. Connect to the intermediate devices between your
    Catalyst 4500/4000 and the device that has the problem MAC address. Do this
    until you are able to identify the source and how this device connects to the
    network.
    Note: Because the MAC address is flapping between two ports, track down both
    of the paths.
    This example shows how to track both of the paths from which this MAC address
    has been learned:
    Note: Assume that you have received this message and you have begun to
    investigate it.
    %SYS-4-P2_WARN: 1/Host 00:50:0f:20:08:00 is flapping between port 1/2 and port
    4/39
    In order to track down how this MAC address was learned from both ports,
    complete these steps:
    1.     Consider port 1/2 first, and issue the show cam dynamic 1/2 command.
    If you see the MAC address 00:50:0f:20:08:00 in the list of the MAC addresses
    that have been learned on this port, determine if this is a single host that
    is connected or if there are multiple hosts that are registered on that port.
    2.     On the basis of whether there is a single or multiple hosts,
    investigate the device:
    o   If there is a single host (00:50:0f:20:08:00) that is connected, check the
    other port that is registered and see if the host is dually attached to the
    switch.
    In this example, the other port is port 4/39.
    o   If the host has connections to other devices that can eventually lead back
    to this switch, try to track down the intermediate devices.
    With Cisco devices, issue the show cdp neighbors mod/port detail command. The
    output provides information about intermediate devices.
    Here is sample output:
    Cat4K> (enable) show cdp neighbors 1/2 detail
    Port (Our Port): 1/2
    Device-ID: brigitte
    Device Addresses:
    IP Address: 172.16.1.1
    Novell address: aa.0
    Holdtime: 171 sec
    Capabilities: ROUTER
    Version:
    Cisco Internetwork Operating System Software
    IOS (tm) 2500 Software (C2500-JS-L), Version 12.0(7)T,  RELEASE SOFTWARE (fc2)
    Copyright (c) 1986-1999 by cisco Systems, Inc.
    Compiled Mon 06-DEC-99 17:10 by phanguye
    Platform: cisco 2500
    Port-ID (Port on Neighbors's Device): Ethernet0
    VTP Management Domain: unknown
    Native VLAN: unknown
    Duplex: half
    System Name: unknown
    System Object ID: unknown
    Management Addresses: unknown
    Physical Location: unknown
    Cat4K> (enable)
    3.     Establish a Telnet session with the device and follow the path of the
    MAC address.
    In this example, the IP address is 172.16.1.1.
    Repeat the procedure for all MAC addresses that the error message reports as
    flapping.
    4.     Create a simple diagram of the source device with that MAC address and
    of the physical connections (the Catalyst 4500/4000 ports) from which and to
    which this MAC address is flapping.
    The diagram enables you to determine if this is a valid port and path for your
    network layout.
    If you verify that both ports on which the MAC address is flapping provide a
    path toward that network node, there is a possibility that you have a
    spanning-tree failure issue. Refer to Spanning Tree Protocol Problems and
    Related Design Considerations
    <http://www.cisco.com/en/US/tech/tk389/tk621/technologies_tech_note09186a00800
    951ac.shtml>  in order to isolate and troubleshoot this loop.
    In large networks in which multiple hosts from multiple vendors are
    interconnected, difficulty arises as you try to track down the host with use
    of just the MAC address. Use the search utility for the IEEE OUI and
    Company_id Assignments <http://standards.ieee.org/regauth/oui/index.shtml>  in
    order to track down these MAC addresses. This list is the front end of the
    database where IEEE has registered all MAC addresses that have been assigned
    to all vendors. Enter the first three octets of the MAC address in the Search
    for: field of this page in order to find the vendor that is associated with
    this device. The first three octets in the example are 00:50:0f.
    These are other issues that can cause this message to appear:
    ·        Server NIC redundancy problem?There is a server with a dual-attached
    NIC that misbehaves and does not follow the standards. The server uses the
    same MAC address for both ports that connect to the same switch.
    ·        Hot Standby Router Protocol (HSRP) flapping?Flapping HSRP can cause
    these messages to appear in the Supervisor Engine console. If you notice that
    HSRP implementation in your network is unstable, refer to Understanding and
    Troubleshooting HSRP Problems in Catalyst Switch Networks
    <http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a00800
    94afd.shtml>  in order to resolve the problem.
    ·        EtherChannel misconfiguration?A misconfigured EtherChannel connection
    can also cause these symptoms. If ports that the flapping message reports are
    members of the same channel group, check your EtherChannel configuration and
    refer to Understanding EtherChannel Load Balancing and Redundancy on Catalyst
    Switches
    <http://www.cisco.com/en/US/tech/tk389/tk213/technologies_tech_note09186a00800
    94714.shtml>  in order to troubleshoot the configuration.
    ·        Host reflects packets back onto the network?The reflection of packets
    back onto the network by a host can also cause flapping. Typically, the root
    cause of this packet reflection is a broken NIC or any failure of the physical
    interface of the host that is connected to the port.
    If the reflection of packets by the host is your root cause, obtain a sniffer
    trace and examine the traffic that goes to and from the ports on which the
    messages have appeared. If a host reflects packets, you typically see
    duplicate packets in the trace. The duplicate packets are a possible symptom
    of this flapping of the MAC address.
    Refer to Configuring SPAN and RSPAN
    <http://www.cisco.com/en/US/docs/switches/lan/catalyst4000/6.3and6.4/configura
    tion/guide/span.html>  for details on how to configure a port for use with a
    sniffer.
    ·        Software or hardware defect?If you have tried to troubleshoot the
    flapping message with the instructions in this section but you still notice
    the issue, seek further assistance from Cisco Technical Support
    <http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html> . Be
    sure to mention and provide documentation of the information that you have
    collected while you followed the steps. This information makes further
    troubleshooting quicker and more efficient.
    HTH
    REgards
    Inayath
    *Plz rate all usefull posts.

  • %SW_MATM-4-MACFLAP_NOTIF: Host 3270.990a.a504 in vlan 125 is flapping between port Fa0/21 and port Gi0/1

    %SW_MATM-4-MACFLAP_NOTIF: Host 3270.990a.a504 in vlan 125 is flapping between port Fa0/21 and port Gi0/1
    Please suggest me how can i fixed it ?

    Sachin,
    those are by no mean errors! they are informative messages which, in some circumnstances, can represent issues.
    As I wrote in step 1, very first step is to determine how often you see a given mac flapping between 2 interfaces.
    How often do you see that?
    I am reiterating the concept as, according to your description, what you see can be pretty normal in your scenario.
    Maybe it is worth clarifying that the message only means that a frame learned via Fa0/21 is now seen from Gi0/1. In static and stable networks traffic from a given host should always come from the same path and therefore should not be re-learned from another port. Every time a switch notices that a MAC which was previously learned from a port is now seen and learned from another one it trigeers that message as this behaviour might represent an ongoing L2 loop, but as I wrote this is not always true.
    However since you have an AP connected to Fa0/21 it is likely that a host with mac 32:70:99:0a:a5:04 was connected to it for some time, and then it browsed and connected to another AP. This is why your switch started seeing traffic from that mac coming from a distribution/switch switch connected to gi0/1, as the l2 path changed.
    I was not able to find the vendor of 32:70:99 as this is not an assigned OUI. Also since this is an unicast locally administered address it could besome kind of application/protocol using it.
    What you have to do is
    - Check in stable condition where this mac is learned from, that is following it switch by switch until you find the port. Since it comes from an AP most likely it is learned from the radio antenna of the AP. You need to check wheter this is an addressed learned over the radio or local to your motorola AP.
    - Once you identify you you will be able to udnerstand why it flapped.
    Having said that you will understand that the majority of your questions don't have too much sense now.. however
    1. They are messages and not errors. see above why you see them.
    2. Check on APs mac address table and see where that address is learned from. I don't know if your AP has some kind of mac notification feature logging all the changes. This is somethign you have to work out yourself. The focus is to first understand what is the mac address in the first place.
    3. This question means nothing. If the flapping address is the mac of some kind of wireless NIC (laptop, smartphone etc.) you cannot prevent users from moving from a site to another. This is waht wireless networks are about. Still, sporadic flapping messages are expected as they just represent how the network is being utilized and you cannot fix them as there is nothing to fix.
    4. The message itself has no impact. If they represent users moving from a wireless location to another there is no harm. If they are continuous and are not related to wireless networks they might indicate a L2 loop. To verify that you need to look for other symptoms which normally are associated with l2 loops: high cpu on the switches in the path, interface drops (on l2 and l3 interface, if present), increasing STP TCNs (not all the times),  unstable STP topology, unstable control plane, similar logs logged in all/many switches. Some or all symptoms can occurr.
    5. plenty.... google it and spend some time reading the docs you find 
    Riccardo

  • %SW_MATM-4-MACFLAP_NOTIF: Host 4025.c225.d9f0 in vlan 16 is flapping between port Gi1/0/27 and port Gi1/0/12

    Hi all ,
            we have a network with CORE4507 access 2960x24port+4portSFP
    CORE configured to allowed vlan all till access switch SFP interface Gi1/0/27 when i show log to switch i found error below.
    \%SW_MATM-4-MACFLAP_NOTIF: Host 4025.c225.d9f0 in vlan 16 is flapping between port Gi1/0/27 and port Gi1/0/12
    In access switch port Gi1/0/12 and port Gi1/0/24 is configured as trunk and WAP121 wirelessAP is connected tow SSID,s are configured  SSID1=VLAN 10 SSID2=VLAN16 
    interface GigabitEthernet1/0/12
     switchport trunk allowed vlan 10,16
     switchport mode trunk
    interface GigabitEthernet1/0/24
     switchport trunk allowed vlan 10,16
     switchport mode trunk
    Any Help
    Regards

    Hello Akash,
                   Thanks for repley port 1/0/27 is configured as trunk and allowed Vlan All
    interface GigabitEthernet1/0/27
     switchport mode trunk
    this is sh cdp ne
    V35#sh cdp neighbors 
    Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                      S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone, 
                      D - Remote, C - CVTA, M - Two-port Mac Relay 
    Device ID        Local Intrfce     Holdtme    Capability  Platform  Port ID
    CORE1            Gig 1/0/27        176             R S I  WS-C4507R Gig 1/23
    Regards

  • NX2-5K-60.8 %FWM-6-MAC_MOVE_NOTIFICATION: Host 0025.64ee.f160 in vlan 1 is flapping between port Po10 and port Po15

    hi All ,
    we received multiples  port channel flapping alerts as below mention .the nx5K os :- System version: 5.2(1)N1(3)..
    we connected two NX-5 CONNECTED THROUGH VPC FROM THAT WE CONNECTE 4849 SWITCH.Please suggest what should i do to resolve the issue.
    Thanks
    Sandeeps
    NX2-5K-60.8 %FWM-6-MAC_MOVE_NOTIFICATION: Host 0025.64ee.f160 in vlan 1 is flapping between port Po10 and port Po15
    NX2-5K-60.8 %FWM-6-MAC_MOVE_NOTIFICATION: Host 2c76.8ad0.e56d in vlan 1 is flapping between port Po11 and port Po10
    -NX2-5K-60.8 %FWM-6-MAC_MOVE_NOTIFICATION: Host 2c76.8ad0.e56d in vlan 1 is flapping between port Po10 and port Po11
    -NX2-5K-60.8 %FWM-6-MAC_MOVE_NOTIFICATION: Host 8c6a.e403.159d in vlan 1 is flapping between port Po10 and port Po29
    NX2-5K-60.8 %FWM-6-MAC_MOVE_NOTIFICATION: Host 2c76.8ad0.e56c in vlan 1 is flapping between port Po11 and port Po10

    You need to trace this mac address: - 00ab.cdef.0123 and check if this has dual nic card if yes then check if nic teaming is configured correctly ...then shut down one of the link and see if you are learning the same mac address on two different ports?
    HTH

  • Host flapping during startup

    Hi everybody,
    I have a slight problem with host flapping.
    First, let me give you an overview of (a part of) the network in question.
    I have two 8 ports 2960 switches (C2960PD-8TT-L), both with five terminal client computers attached to them, connected via PoE to two ports of a 4503.
    The configuration of the two ports on the 4503 switch is as follows:
    Current configuration : 233 bytes
    interface FastEthernet3/46
    description to 2960 Switch1 G0/1
    switchport trunk encapsulation dot1q
    switchport trunk native vlan 88
    switchport trunk allowed vlan 88,991
    switchport mode trunk
    switchport port-security maximum 3
    end
    interface FastEthernet3/47
      description to 2960 Switch2 G0/1
      switchport trunk encapsulation dot1q
      switchport trunk native vlan 88
      switchport trunk allowed vlan 88,991
      switchport mode trunk
      switchport port-security maximum 3
    end
    The configuration of the 2960 switches is as follows:
    interface GigabitEthernet0/1
    description to 4503 Switch1 F3/47
    switchport trunk native vlan 88
    switchport trunk allowed vlan 88,991
    switchport mode trunk
    end
    interface FastEthernet0/1
    description PC terminal
    switchport access vlan 991
    switchport mode access
    no snmp trap link-status
    no mdix auto
    end
    Rapid spanning-tree is enabled on all switches. There are no loops (the 2960 switches are connected with only 1 uplink to the 4503) anywhere.
    =========
    now my problem. The terminals connected to the 2960 switches are turned on every morning. Some terminals won't show the startup screen (no connection) but when you refresh, the connection is fine. The log of the 2960's show the following on april 7:
    2960 Switch1:
    nothing
    2960 Switch2:
    Apr  7 09:00:04.360 GMT+1: %SW_MATM-4-MACFLAP_NOTIF: Host 00e0.c549.0446 in vlan 991 is flapping between port Gi0/1 and port Fa0/5
    Apr  7 09:00:04.628 GMT+1: %SW_MATM-4-MACFLAP_NOTIF: Host 00e0.c549.038b in vlan 991 is flapping between port Gi0/1 and port Fa0/1
    4503:
    Apr  7 09:00:09.871 GMT+1: %C4K_EBM-4-HOSTFLAPPING: Host 00:E0:C5:49:04:46 in vlan 991 is flapping between port Fa3/46 and port Fa3/47
    Apr  7 09:00:11.027 GMT+1: %C4K_EBM-4-HOSTFLAPPING: Host 00:E0:C5:49:03:8B in vlan 991 is flapping between port Fa3/46 and port Fa3/47
    -------- April 8--------
    2960 Switch1:
    Apr  8 09:02:39.168 GMT+1: %SW_MATM-4-MACFLAP_NOTIF: Host 00e0.c549.0431 in vlan 991 is flapping between port Gi0/1 and port Fa0/5
    2960 Switch2:
    Apr  8 09:02:39.445 GMT+1: %LINK-3-UPDOWN: Interface FastEthernet0/2, changed state to down
    Apr  8 09:02:42.465 GMT+1: %SW_MATM-4-MACFLAP_NOTIF: Host 00e0.c549.0431 in vlan 991 is flapping between port Fa0/5 and port Gi0/1
    Apr  8 09:02:42.926 GMT+1: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
    Apr  8 09:02:43.530 GMT+1: %LINK-3-UPDOWN: Interface FastEthernet0/2, changed state to up
    4503:
    Nothing
    MAC 00e0.c549.0446 is physically connected to 2960 switch2, Fa 0/5 and the MAC address table on 2960 Switch 1 shows the address on Gi 0/1 (which is correct).
    So, can someone explain to me why I see these flapping messages wihtout loops of etherchannels or whatsoever? Just simple access ports over single trunks?
    Any help is much appreciated.
    Thanks,
    Ian

    Hi everybody,I have a slight problem with host flapping.First, let me give you an overview of (a part of) the network in question.
    I have two 8 ports 2960 switches (C2960PD-8TT-L), both with five
    terminal client computers attached to them, connected via PoE to two
    ports of a 4503.The configuration of the two ports on the 4503 switch is as follows:Current configuration : 233 bytes
    interface FastEthernet3/46
    description to 2960 Switch1 G0/1
    switchport trunk encapsulation dot1q
    switchport trunk native vlan 88
    switchport trunk allowed vlan 88,991
    switchport mode trunk
    switchport port-security maximum 3
    end!
    interface FastEthernet3/47
      description to 2960 Switch2 G0/1
      switchport trunk encapsulation dot1q
    Hi Ian,
    The problem of Mac flapping between the ports in switches can be due to network switches for misconfigurations that might cause a data-forwarding loop
    - It could be a wrong setup
    - It could be resolved by disabling unused NIC cards in the servers connected 
      to the switch could fix the problem of MAC address Flapping.
    - It could resolve by bad Hardware replacement(switch).
    and more specifically check the e server providers to see if the OS and server platform support 'NIC' Teaming (NIC Bonding).
    FYI - NIC teaming allows users to group two or more physical NICs into a single logical network device called a bond. Once a logical NIC is configured, the virtual machine is not aware of the underlying physical NICs. Packets sent to the logical NIC are dispatched to one of the physical NICs in the bond and packets arriving at any of the physical NICs are automatically directed to the appropriate logical NIC.
    If one of the underlying physical NICs is broken or its cable has been unplugged, server will detect the fault condition and automatically move traffic to another NIC in the bond. This capability eliminates a single point of failure for any one physical NIC and makes the overall network connection fault-tolerant.
    Hope to Help !!
    Ganesh.H
    Remember to rate the helpful post

  • Host Flapping Between Port Channel

    Hi,
    I have 2 VSS Pair (4X6509E) Switch. First VSS Pair is configured as Server Core and Second VSS Pair is configured as LAN Core. There is a port channel Port 10 with 4Port configured between Server and LAN Core.  We have also couple Wireless LAN Controllers (5508) Connected to Server Core. PortChannel 25 from Wireless LAN Controller 1 and Portchannel 26 from Wireless LAN  Controller 2. (Only 1 controller will be acitve at a time)
    My issue is that am getting a MAC Flapping error between Port Channel 25  and Port Channel 10.  I tried cleard the  MAC entry and from ARP found the IP is LAN Core SVI.
    "%MAC_MOVE-SW1_SP-4-NOTIF: Host ec30.91e1.2f80 in vlan 80 is flapping between port Po26 and port Po10"
    show arp#
    Internet  10.50.200.254          23   ec30.91e1.2f80  ARPA   Vlan50
    VLAN 80 is WIreless Guest VLAN.
    Please guide me in isolating the issue.
    Toplolgy file is attached and also 6509-E is ruuning IOS "s72033-ipservicesk9_wan-mz.122-33.SXI3.bin"

    SERVER-CORE
    interface Port-channel10
    switchport
    switchport trunk encapsulation dot1q
    switchport trunk native vlan 50
    switchport trunk allowed vlan 2-4094
    switchport mode trunk
    no mls qos channel-consistency
    interface TenGigabitEthernet1/6/1
    switchport
    switchport trunk encapsulation dot1q
    switchport trunk native vlan 50
    switchport trunk allowed vlan 2-4094
    switchport mode trunk
    channel-protocol pagp
    channel-group 10 mode desirable non-silent
    nterface TenGigabitEthernet1/6/3
    switchport
    switchport trunk encapsulation dot1q
    switchport trunk native vlan 50
    switchport trunk allowed vlan 2-4094
    switchport mode trunk
    shutdown
    channel-protocol pagp
    channel-group 10 mode desirable non-silent
    interface TenGigabitEthernet2/6/1
    switchport
    switchport trunk encapsulation dot1q
    switchport trunk native vlan 50
    switchport trunk allowed vlan 2-4094
    switchport mode trunk
    channel-protocol pagp
    channel-group 10 mode desirable non-silent
    interface TenGigabitEthernet2/6/3
    switchport
    switchport trunk encapsulation dot1q
    switchport trunk native vlan 50
    switchport trunk allowed vlan 2-4094
    switchport mode trunk
    channel-protocol pagp
    channel-group 10 mode desirable non-silent
    interface Port-channel25
    description *****Connected to QOC-WLC1*****
    switchport
    switchport trunk encapsulation dot1q
    switchport mode trunk
    interface GigabitEthernet1/1/3
    switchport
    switchport trunk encapsulation dot1q
    switchport mode trunk
    channel-group 25 mode on
    interface GigabitEthernet1/1/4
    switchport
    switchport trunk encapsulation dot1q
    switchport mode trunk
    channel-group 25 mode on
    interface Port-channel26
    switchport
    switchport trunk encapsulation dot1q
    switchport mode trunk
    interface GigabitEthernet2/1/3
    switchport
    switchport trunk encapsulation dot1q
    switchport mode trunk
    channel-group 26 mode on
    interface GigabitEthernet2/1/4
    switchport
    switchport trunk encapsulation dot1q
    switchport mode trunk
    channel-group 26 mode on
    SERVER-CORE#show etherchannel summary
    Group  Port-channel  Protocol    Ports
    ------+-------------+-----------+-----------------------------------------------
    1      Po1(RU)          -        Te1/5/4(D)     Te1/5/5(P)    
    2      Po2(RU)          -        Te2/5/4(D)     Te2/5/5(P)    
    10     Po10(SU)        PAgP      Te1/6/1(P)     Te1/6/3(D)     Te2/6/1(P)     Te2/6/3(P)    
    25     Po25(SU)         -        Gi1/1/3(P)     Gi1/1/4(P)    
    26     Po26(SU)         -        Gi2/1/3(P)     Gi2/1/4(P)    

  • Host [MAC] vlan [x] is flapping between port [x/x/x] and port [x/x/x]

    Hi all, I have two switches connected in cross-3750X stack into a single SW 6500., But I get the following error appears.
    18w2d: %SW_MATM-4-MACFLAP_NOTIF: Host 0012.950a.9952 in vlan 10 is flapping between port Gi5/0/46 and port Gi6/0/44
    What can i do?
    Thank you very much¡¡.

    The configuration on the port channel is that all the port must be with the equal configuration :
    For example :
    interface Port-channel1
     description IDC-TO6500 - 192.168.0.12
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 1,54,136,192,432
     switchport mode trunk
     speed 100
     duplex full
    interface GigabitEthernet1/0/1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 1,54,136,192,432
     switchport mode trunk
     speed 100
     duplex full
     channel-protocol lacp
     channel-group 1 mode active
    interface GigabitEthernet1/0/2
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 1,54,136,192,432
     switchport mode trunk
     speed 100
     duplex full
     channel-protocol lacp
     channel-group 1 mode active
    The same configuration is on the 3750 :
    interface Port-channel1
     description IDC-TO3750 - 192.168.0.12
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 1,54,136,192,432
     switchport mode trunk
     speed 100
     duplex full
    interface GigabitEthernet1/0/1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 1,54,136,192,432
     switchport mode trunk
     speed 100
     duplex full
     channel-protocol lacp
     channel-group 1 mode active
    interface GigabitEthernet1/0/2
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 1,54,136,192,432
     switchport mode trunk
     speed 100
     duplex full
     channel-protocol lacp
     channel-group 1 mode active

  • Error message of MAC flapping for CCM-UC installed in UCS server

    Dear All,
    I have a strange issue, I have the 2 UCS servers setup with CCM & unity Connection running on each server on PUB - SUB mode.
    I'm getting following error message on the Switch where the UCS server Connects.
    I'm unable to trace why we are getting this error message, There is no problem with accessing CCM or UC, also the Phone & Voice mail seem to working.
    un  25 13:15:14.853: %SW_MATM-4-MACFLAP_NOTIF: Host 000c.2911.db00 in vlan  410 is flapping between port Gi1/0/34 and port Gi1/0/33
    Jun 25  13:15:28.828: %SW_MATM-4-MACFLAP_NOTIF: Host 000c.2911.db00 in vlan 410  is flapping between port Gi1/0/34 and port Gi1/0/33
    Jun 25  13:15:44.145: %SW_MATM-4-MACFLAP_NOTIF: Host 000c.2911.db00 in vlan 410  is flapping between port Gi1/0/34 and port Gi1/0/33
    Has anybody expereinced such error before, Appreciate your help in tracing this error.
    Thanks,
    Oliver

    Hello,
    I believe you'll get better answer at:
    "https://supportforums.cisco.com/search.jspa?peopleEnabled=true&userID=&containerType=14&container=2003&spotlight=true&q=UCS"
    my best guess is to check the LAN config on the UCS. It seems its trying to load balance the traffic in Active-Active rather than Active-Standby.
    HTH

  • HSRP issues and flapping links and vlans

    Hi
    My network is having some issues to do with a certain vlan and HSRP. We have 2 x 6509 switches as the distribution switches and access layer stacks. HSRP is running between the 2 6509 switches.
    Solarwinds shows the following output when the issues occur
    29/11/2014 16:39:26 192.168.10.2 Warning 1166: 001179: Host 0060.d501.9bcf in vlan 101 is flapping between port Gi0/1 and port Fa0/1
    About the same time a number of ports on vlan 101 on an access switch start dropping and coming up again. This was followed by the two 6509 switches reporting a large number of vlans switch back and forth between active and standby state in HSRP causing considerable problems on the network. We pulled the plug on the access switch but it didn't resolve the problem.
    We had similar behaviour few days ago This time it continued until we shut down one of the 6509s. When we brought it up again la few hours later the problem didn't reoccur. The problem seems to be centred on our vlan 101
    Has anyone experienced these sort of issues before or give me a clue what the issue may be. Seems like issues with vlan 101 cause the hsrp states to change but vlan 101 is not used for hsrp.
    Thanks

    Hi,
    HSRP could be a victim here. Main issue could be related to spanning tree flapping or loop.
    HTH
    Amit

  • MAC Flapping Issue

    Dear Folks,
    I am working with a IT organization as network administrator, at client site we are getting the MAC FLAPPING issue since 1 month, due to that some time it completely down my whole network. Scenario is like that, we are using Ruckus AP and Zone director as a WLAN controller which is directly conecteted with our core switch. Rest of indoor AP's are connected with Distribute and access switch. Now since 1 month we are getting in core switch below mention notification -
    #sh log
    Log Buffer (8192 bytes):
    889842: Nov 18 13:46:37.182 IST: %SYS-5-CONFIG_I: Configured from console by iympladmin on console
    889843: 001585: Nov 18 13:47:09.724 IST: %SW_MATM-4-MACFLAP_NOTIF: Host c4d9.879b.cf99 in vlan 13 is flapping between port Gi1/1/4 and port Gi1/1/3 (nhcin-sjp01-2)
    889844: Nov 18 13:49:17.806 IST: %LINK-3-UPDOWN: Interface GigabitEthernet2/0/37, changed state to up
    889845: Nov 18 13:49:19.818 IST: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/37, changed state to up
    889846: 001586: Nov 18 14:04:57.394 IST: %SW_MATM-4-MACFLAP_NOTIF: Host c4d9.87aa.d584 in vlan 13 is flapping between port Gi2/0/41 and port Gi2/0/35 (nhcin-sjp01-2)
    889847: 001587: Nov 18 14:13:39.784 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 0008.2292.1440 in vlan 12 is flapping between port Gi2/1/2 and port Gi1/1/4 (nhcin-sjp01-2)
    889848: 001588: Nov 18 14:15:35.735 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 1c3e.843e.c441 in vlan 13 is flapping between port Gi2/0/41 and port Gi2/0/35 (nhcin-sjp01-2)
    889849: Nov 18 14:23:23.346 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 14f6.5afa.ecb9 in vlan 12 is flapping between port Gi2/0/37 and port Gi2/0/35
    889850: 001589: Nov 18 14:23:23.415 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 14f6.5afa.ecb9 in vlan 12 is flapping between port Gi2/0/37 and port Gi2/0/35 (nhcin-sjp01-2)
    889851: Nov 18 14:32:33.860 IST: %SW_MATM-4-MACFLAP_NOTIF: Host c0cb.3886.30cb in vlan 13 is flapping between port Gi2/0/41 and port Gi2/0/35
    889852: 001590: Nov 18 14:32:33.954 IST: %SW_MATM-4-MACFLAP_NOTIF: Host c0cb.3886.30cb in vlan 13 is flapping between port Gi2/0/41 and port Gi2/0/35 (nhcin-sjp01-2)
    889853: 001591: Nov 18 14:33:05.755 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 843a.4b15.187a in vlan 12 is flapping between port Gi2/0/41 and port Gi2/0/35 (nhcin-sjp01-2)
    889854: 001592: Nov 18 14:33:07.017 IST: %SW_MATM-4-MACFLAP_NOTIF: Host 6c88.14a0.93d8 in vlan 12 is flapping between port Gi2/0/41 and port Gi2/0/35 (nhcin-sjp01-2)
    nhcin-sjp01#
    As mentioned in msg 12 & 13 VLAN is our WLAN.
    After getting this msg automatically all network goes down, I need to shut down the associated port winch is directly or indirectly connected with AP, and after some time it will work properly.
    Now I need some mechanism which can be block the duplicate source mac address to preventing from this kind of scenario.
    Regards,
    Shekhar 

    Hi Devils,
    Answer is in below -
    1. Are those MAC addresses actual Wireless Hosts? i.e have you traced them?
    = Yes, those are actual wireless MAC add, I have check in zone director controller.
    2. Are the SSID's set to tunnel?
    =No
    3. Do you have one ZoneDirector or two?
    =Two, both of them are connected with core switch.
    I have been confirmed about that  if wireless users are roaming between two AP or more it will appear the same error msg, now what would be the solution. ????
    What extly the solution is?>
    Where should i implement the solution on switch or zone director?
    Please suggest!!!!!

  • Cat6509 Etherchannel to AIX

    Due to the following log messages last Friday night and discovering our AIX connections are Link Aggregated, I am attempting to connection 4 ports to AIX VIO servers using etherchannel. Have not had any success as of yet.
    sh log | i %MAC_MOVE-SP-4-NOTIF
    Jan 25 16:13:06: %MAC_MOVE-SP-4-NOTIF: Host 0a5d.3c1e.8002 in vlan 1 is flapping between port Gi2/19 and port Gi2/20 - 172.25.3.44
    Jan 25 16:13:06: %MAC_MOVE-SP-4-NOTIF: Host 0a5d.3e72.4902 in vlan 1 is flapping between port Gi2/19 and port Gi2/20 - 172.25.3.31
    Jan 25 16:13:06: %MAC_MOVE-SP-4-NOTIF: Host 0a5d.3ade.7902 in vlan 1 is flapping between port Gi2/19 and port Gi2/20 - 172.25.3.41
    Anyone have knowledge or experience with this? Thank you ahead for any assistance.
    Configuration: Cat6509
    int port-channel 23
    switchport
    switchport mode access
    no sh
    int Gi2/22
    switchport
    switchport mode access
    switchport access vlan 1
    spanning-tree portfast
    channel-group 23 mode active
    int Gi2/24
    switchport
    switchport mode access
    switchport access vlan 1
    spanning-tree portfast
    channel-group 23 mode active
    Configuration: AIX
    EtherChannel / Link Aggregation: ent5
    Status: Available
    Attributes:
    adapter_names   ent0,ent1      EtherChannel Adapters
    alt_addr  0x000000000000       Alternate EtherChannel Address
    auto_recovery   yes                 Enable automatic recovery after failover
    backup_adapter  NONE           Adapter used when whole channel fails
    hash_mode       default            Determines how outgoing adapter is chosen
    interval        long                     Determines interval value for IEEE 802.3ad mode
    mode            standard             EtherChannel mode of operation
    netaddr         0                        Address to ping
    noloss_failover yes                  Enable lossless failover after ping failure
    num_retries     3                     Times to retry ping before failing
    retry_time      1                      Wait time (in seconds) between pings
    use_alt_addr    no                   Enable Alternate EtherChannel Address
    use_jumbo_frame no               Enable Gigabit Ethernet Jumbo Frames

    Hi,
    The configuration you've applied to the switches is to enable a standards based Cisco EtherChannel i.e., IEEE 802.3ad (now IEEE 802.1ax) using the Link Aggregation Control Protocol (LACP).
    From reading the IBM AIX Configuring an EtherChannel documentation, the way I understand the AIX configuration you've pasted above, it's not running IEEE 802.3ad Link Aggregation with LACP. I believe mode is the important setting here, and the aforementioned document states the following:
    Mode: You can choose from the following modes:
    standard: In this mode the EtherChannel uses an algorithm to choose which adapter it will send the packets out on. The algorithm consists of taking a data value, dividing it by the number of adapters in the EtherChannel, and using the remainder (using the modulus operator) to identify the outgoing link. The Hash Mode value determines which data value is fed into this algorithm (see the Hash Mode attribute for an explanation of the different hash modes). For example, if the Hash Mode is standard, it will use the packet's destination IP address. If this is 10.10.10.11 and there are 2 adapters in the EtherChannel, (1 / 2) = 0 with remainder 1, so the second adapter is used (the adapters are numbered starting from 0). The adapters are numbered in the order they are listed in the SMIT menu. This is the default operation mode.
    round_robin: In this mode the EtherChannel will rotate through the adapters, giving each adapter one packet before repeating. The packets may be sent out in a slightly different order than they were given to the EtherChannel, but it will make the best use of its bandwidth. It is an invalid combination to select this mode with a Hash Mode other than default. If you choose the round-robin mode, leave the Hash Mode value as default.
    netif_backup: To enable Network Interface Backup Mode, you can configure multiple adapters in the primary EtherChannel and a backup adapter. For more information, see Configuring Network Interface Backup.
    8023ad: This options enables the use of the IEEE 802.3ad Link Aggregation Control Protocol (LACP) for automatic link aggregation. For more details about this feature, see IEEE 802.3ad Link Aggregation configuration.
    You may want to check with the server team again and confirm that they have the same understanding of an aggregate link as you have. With the setup you've shown applied to the Catalyst switch I think they should be running the AIX server with the mode configured as 802.3ad.
    Regards

  • MACFLAP_NOTIF through AIR-AP1310G

    Hello guys!
    I kindly ask for your help in order to resolve an issue. I have a switch WS-C3650 that is sending a MACFLAP log that come from wireless hosts in three of its interfaces:
    Jun 27 14:12:31.519: %SW_MATM-4-MACFLAP_NOTIF: Host 3cd0.f82c.f35c in vlan 27 is flapping between port Gi1/0/10 and port Gi1/1/1
    Jun 27 14:19:53.841: %SW_MATM-4-MACFLAP_NOTIF: Host f8f1.b612.ac7d in vlan 27 is flapping between port Gi1/1/1 and port Gi1/0/10
    Jun 27 14:30:03.286: %SW_MATM-4-MACFLAP_NOTIF: Host e899.c47f.d55e in vlan 27 is flapping between port Gi1/0/8 and port Gi1/0/10
    In Gi1/0/8 and Gi1/0/10 I have 2 AIR-AP1310G with VLAN 27 as data VLAN and NATIVE VLAN at the same time, and they are connected to the switch through an access port. The switch has NATIVE VLAN 99.
    The Gi1/1/1 is a trunk port connected to a Core switch. 
    My question is: is it correct to have the same number in NATIVE VLAN and in DATA VLAN in my Access-Points?
    The next config is in both access-points:
    interface Dot11Radio0.27
    encapsulation dot1Q 27 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface FastEthernet0.27
    encapsulation dot1Q 27 native
    no ip route-cache
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    Thank you very much!
    Best regards!
    Iván

    To prevent loop issues, we recommend that you do not connect two MAPs to each other over their Ethernet ports, unless they are configured as trunk ports on different native VLANs, and each is connected to a similarly configured switch.

  • IDSM with inline pairs causing mac move

    Hello,
    I´ve just added the IDSM-2 blades on a 6500 and configured it but it did not work as I planned.
    This picture is a little scale what I tried to do, actually I had more vlans on the inspection. 
    I have 2 cores and a portchannel trunk in between them and for redundancy I´m using HSRP as the config shows.
    After I congfigured I´ve got these msgs and I could not figure out how to stop it:
    Core1
    %MAC_MOVE-SP-4-NOTIF: Host 001a.a2e4.e800 in vlan 6 is flapping between port Gi6/d1 and port Po1
    %MAC_MOVE-SP-4-NOTIF: Host 001a.a2e4.e800 in vlan 7 is flapping between port Gi6/d1 and port Po1
    MAC 001a.a2e4.e800 is from Core2
    Core2
    %MAC_MOVE-SP-4-NOTIF: Host 0022.557b.c340 in vlan 6 is flapping between port  and port Po1
    %MAC_MOVE-SP-4-NOTIF: Host 0022.557b.c340 in vlan 7 is flapping between port Po1 and port
    Mac 0022.557b.c340 is from Core1
    There was only one VLAN pair that did not have this problem, which was the VLAN L2 for the ISP router and the VLAN Outside for the FWSM . It also was the only VLAN that did not have HSRP working, I dont know if it has something to do.
    The Core 1 is the STP Root with priority of Zero and the Core 2 is the Backup Root with priority 4096
    Any guesses ?

    I see this log message frequently when using a switch to feed an IPS sensor if the same Ethernet frame is entering the same VLAN on two different interfaces. I can;t tell how your traffic is flowing but I think you have the same issue.
    In my case it was not anything to worry about so I just ignored the messages.
    - Bob

  • A cisco 2960S 100% cpu

    hi
    On a Cisco 2960S-48TS-L, After a Mac flapping the CPU went to 100 %  
    700sw10_emb#sh proc cpu sort
    CPU utilization for five seconds: 99%/5%; one minute: 99%; five minutes: 99%
     PID Runtime(ms)     Invoked      uSecs   5Sec   1Min   5Min TTY Process
     155    37771767     3603617      10481 23.51% 23.68% 23.53%   0 Hulc LED Proces
    s
     225     4213295      956535       4404 23.31% 23.01% 22.98%   0 HULC DAI Proces
    s
     234     3486099     1061257       3284 20.21% 20.41% 20.48%   0 IP Host Track P
    r
     182     3761068      742168       5067 18.51% 18.40% 18.46%   0 Auth Manager
     104      244786     3413567         71  1.80%  1.57%  1.51%   0 HLFM address le
    here is the log
    Mar 13 17:43:38.076: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthe
    rnet1/0/29, changed state to up
    Mar 14 08:05:25.076: %SW_MATM-4-MACFLAP_NOTIF: Host 000b.6b22.7b72 in vlan 1 is
    flapping between port Gi1/0/48 and port Gi1/0/51
    Mar 14 08:07:52.602: %SW_MATM-4-MACFLAP_NOTIF: Host 000b.6b22.7b72 in vlan 1 is
    flapping between port Gi1/0/48 and port Gi1/0/51
    Mar 14 08:09:16.681: %SW_MATM-4-MACFLAP_NOTIF: Host 000b.6b22.7b72 in vlan 1 is
    flapping between port Gi1/0/48 and port Gi1/0/51
    .Mar 14 08:38:10.808: %SW_MATM-4-MACFLAP_NOTIF: Host 000b.6b22.79de in vlan 1 is
     flapping between port Gi1/0/48 and port Gi1/0/51
    The only solution is restart the switch
    regards

    I am not sure what IOS version you are using but here's my recommendation:  
    1.  If you are running 12.2 then use 12.2(55)SE8; or
    2.  If you are running 15.X then use 15.0(2)SE4.
    Don't even bother using the others.

Maybe you are looking for