Erro message

[Flyers01]

cisco 3560 switches with 12.2.37 SE1
network goes into a loop every 12 hours or so and I see this error message in the log with different mac address
Anybody know what this means

%SW_MATM-4-MACFLAP_NOTIF:Host 00a0.f856.4a72 in vlan 1 is flapping between port Gi0/2 and port Gi0/1
%SW_MATM-4-MACFLAP_NOTIF: Host 0004.009c.d5e7 in vlan 1 is flapping between port Gi0/2 and port Gi0/1
%SW_MATM-4-MACFLAP_NOTIF: Host 00a0.f856.4f1c in vlan 1 is flapping between port Gi0/2 and port Gi0/1
And so on with mac address
1 other strange thing is
one ports has this configuration
switchport trunk pruning vlan 2-960,969-1001
and when I remove this it returns in the configuration

 

[Flyers01]

I think this is going into a loop but don't know for sure
it only happens about every 12 hours

 

[vipergg]

As posted on the cisco.com forum you need to track down what is on those 2 ports , more than likely someone has wired something in between those ports whether its a switch or a hub and when he comes in and powers on it cause a spanning tree loop . You might see this is and could be normal if there are wireless AP"s hooked to those 2 ports . you would get this as they roam between AP's .

 

[Flyers01]

There is a fiber run between those ports
It is connected to another switch
cdp nei
shows up fine

 

[Flyers01]

Does anybody know how to bring back a log file for a couple days ago
What do you have to do

 

[burtsbees]

Depends on how big the buffer is set for...sh logg will show you everything in the buffer. Do you log to a syslog?

Burt

 

[Flyers01]

no i do not wasn't sure if you can bring back a log from a couple of days ago

 

[burtsbees]

If it hasn't filled the buffer...that's about all I can say.

As far as the pruning coming back---for the trunk, is it something like

switchport trunk allowed vlan 2-960,696-1001

Post the configs of the flapping links (trunk, switchport, and pertinent vlan info)...

Burt