Incomplete MAC address tables for Cisco 2960 and 4900M switches - missing static

[victor]

Could you please send result of SNMP walk on .1.3.6.1.2.1.17.4.3.1.1 for that switch?

Best regards,
Victor

[GTM]

[netxms@netxms ~]# snmpwalk -v 2c -Of -c "SUPERSECRETSTRING" THE_IP_ADDRESS .1.3.6.1.2.1.17.4.3.1.1
.iso.org.dod.internet.mgmt.mib-2.dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbAddress.'..B...' = STRING: 0:3:42:f4:ef:81
.iso.org.dod.internet.mgmt.mib-2.dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbAddress.'.....`' = STRING: 0:1a:1e:0:9a:60
.iso.org.dod.internet.mgmt.mib-2.dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbAddress.'......' = STRING: 0:1a:1e:0:9a:b0
.iso.org.dod.internet.mgmt.mib-2.dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbAddress.'.&....' = STRING: 0:26:f0:dd:0:0
.iso.org.dod.internet.mgmt.mib-2.dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbAddress.'.*j..B' = STRING: 0:2a:6a:a4:f0:42
.iso.org.dod.internet.mgmt.mib-2.dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbAddress.'.*j.l.' = STRING: 0:2a:6a:a5:6c:c2
.iso.org.dod.internet.mgmt.mib-2.dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbAddress.'(..^.h' = STRING: 28:c7:ce:5e:dd:68
.iso.org.dod.internet.mgmt.mib-2.dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbAddress.'(..^.X' = STRING: 28:c7:ce:5e:de:58
[netxms@netxms ~]#

[victor]

Is it all MAC addresses that should be? If not, try to use community@vlan for different vlans (for example, public@100 as community string for vlan 100) - will it report all MAC addresses? Also please do walk on .1.3.6.1.2.1.17.4.3.1.2 and .1.3.6.1.2.1.17.4.3.1.3 (or just one walk on .1.3.6.1.2.1.17.4.3.1).

Best regards,
Victor

[GTM]

No, it's not all of the MAC addresses.  There are 3 or 4 VLANs on the switch.  I attached the output of one of them.

---

snmpwalk.txt

[victor]

I just noticed that you check FDB on switch using object tools. What is shown if you use Topology -> Switch forwarding database context menu on switch?

[GTM]

Ah, going that route it shows all of the MAC addresses.  Although the "Find IP Address" tool still shows the indirectly attached port.

[victor]

So the problem is not with reading FDB, but with internal logic. Can you run manual topology poll (from Poll->Topology context menu) on Cisco switch and your workstation and show results?

[GTM]

From the switch:

[26.01.2016 09:34:56] **** Poll request sent to server ****
[26.01.2016 09:34:56] Poll request accepted
[26.01.2016 09:34:56] Starting topology poll for node IT
[26.01.2016 09:34:58] VLAN list successfully retrieved from node
[26.01.2016 09:35:01] Switch forwarding database retrieved
[26.01.2016 09:35:02] Link layer topology retrieved (2 connections found)
[26.01.2016 09:35:02] Updating peer information on interfaces
[26.01.2016 09:35:02]    Local interface Gi1/0/50 linked to remote interface UPLINK SWITCH1:Ethernet2/21
[26.01.2016 09:35:02]    Local interface Gi2/0/50 linked to remote interface UPLINK SWITCH2:Ethernet2/21
[26.01.2016 09:35:02] Link layer topology processed
[26.01.2016 09:35:02] Finished topology poll for node IT
[26.01.2016 09:35:02] **** Poll completed successfully ****

And from the node object that is my workstation:

[26.01.2016 09:36:44] **** Poll request sent to server ****
[26.01.2016 09:36:44] Poll request accepted
[26.01.2016 09:36:44] Starting topology poll for node Test Workstation
[26.01.2016 09:36:44] Failed to get switch forwarding database
[26.01.2016 09:36:44] Link layer topology retrieved (0 connections found)
[26.01.2016 09:36:44] Updating peer information on interfaces
[26.01.2016 09:36:44] Link layer topology processed
[26.01.2016 09:36:44] Finished topology poll for node Test Workstation
[26.01.2016 09:36:44] **** Poll completed successfully ****

I hope that's what you were looking for.

[victor]

Do you see correct MAC address on workstation's interface? If yes, is this MAC address present in FDB table you see in console and is it the only MAC address on a port?

[GTM]

Here is a CSV export of the FDB entry for the workstation:

"MAC Address","Port","Interface","VLAN","Node","Type"
"00:23:24:6C:89:04","95","[0]","500","Test Workstation","static"

The workstation is actually on Gi2/0/39.  My workstation is plugged into a Polycom IP phone, so Gi2/0/39 has both MAC addresses in the mac address table.  The port is an access port (we don't currently separate voice into a dedicated VLAN).

Here's the entry for the phone:

"MAC Address","Port","Interface","VLAN","Node","Type"
"00:04:F2:9D:B0:F2","95","[0]","500","","static"