Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Device Move Detection in Logs

Status
Not open for further replies.

Cabarrus

Technical User
Jan 8, 2009
226
US
I have a large amount of entries like below ( different DN's on each entry ) .. Anyone can tell me if this is a concern or something i can resolve? thanks

Log Type: Maintenance
Log Number: 832
Severity: Warning
Date: 2009/Feb/13
Time: 10:01:22
Source: Device Move Detection
Description: Maintenance: Category(General); msgFormatId(0) The IP device, DN 1215, moved from CDP L2 MAC Unstable, CDP Port Unstable, CDP L2 IP Address to CDP L2 MAC 00:0F:90:89:4C:99, CDP Port GigabitEthernet0/1, CDP L2 IP Address 10.8.1.254 .
Module: Main
File Name and Line Number: Maintenance;0
 
The 3300 will keep track of which port a phone is plugged into and can raise an alarm if a phone changes port MAC address ( ie is moved ). This is used if CESID is set up for 911 notification. The messages are more for informaton then anything else so I don't believe you need to worry. Not sure why the phone is reported as moving.
 
I found this in the Help Files under CESID Assignment

If "Unstable" appears in this field for STP and/or CDP, it means that the device is receiving conflicting L2 MAC and Port data. This issue can occur if the device is connected to an L2 switch that doesn't have STP or CDP enabled, but the network components higher up in the network tree have STP or CDP enabled. Therefore, the L2 broadcast from the switch higher in the network tree gets passed though the lower L2 switch and the phone receives L2 data from multiple sources.


*******************************************************
Occam's Razor - All things being equal, the simplest solution is the right one.
 
We havent fixed this yet, but we did identify our core switch as Cisco which uses one type of STP, Dell & Procurve edge switches which each utilize there own STP. So we have 3 types of STP running on our network :)
 
ok, the fix was to disable CDP on our core switch which is a Cisco Catalyst 3550. I didnt see a purpose of leaving it enabled, and disabling it prevented these msg's from coming up.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top