Вот такая диагностика:
Цитата:
DES-3526:admin#sho fdb
Command: show fdb
Unicast MAC Address Ageing Time = 300
VID VLAN Name MAC Address Port Type
---- ---------------- ----------------- ------ ----------------
752 752 00-18-E7-FD-10-FB 26 Dynamic
752 752 00-27-07-00-22-22 1 BlockByAddrBind
752 752 34-08-04-C2-05-33 26 Dynamic
752 752 84-C9-B2-64-97-FD 26 Dynamic
752 752 C8-3A-35-34-67-30 26 Dynamic
752 752 C8-3A-35-44-0C-40 26 Dynamic
2713 admin 00-17-DF-5D-CF-80 26 Dynamic
2713 admin 00-19-5B-89-35-40 26 Dynamic
2713 admin 00-1E-58-A9-38-B8 CPU Self
3713 00-17-DF-5D-CF-80 26 Dynamic
4026 lost26 B0-C5-54-8F-76-25 26 Dynamic
Total Entries : 11
DES-3526:admin#show address_binding blocked
Command: show address_binding blocked
VID VLAN Name MAC Address Port Type
---- -------------------------------- ----------------- ---- ---------------
752 752 00-27-07-00-22-22 1 BlockByAddrBind
Total entries : 1
DES-3526:admin#
А в логах:
Цитата:
1268 2015/08/21 19:47:35 Unauthenticated IP-MAC address and discarded by ip mac port binding (IP: 192.168.0.1, MAC: E8-94-F6-54-73-93, port: 2)
1267 2015/08/21 19:47:34 Unauthenticated IP-MAC address and discarded by ip mac port binding (IP: 192.168.0.1, MAC: F8-1A-67-EC-9A-0D, port: 13)
1266 2015/08/21 19:46:35 Unauthenticated IP-MAC address and discarded by ip mac port binding (IP: 192.168.0.1, MAC: E8-94-F6-54-73-93, port: 2)
1265 2015/08/21 19:46:34 Unauthenticated IP-MAC address and discarded by ip mac port binding (IP: 192.168.0.1, MAC: F8-1A-67-EC-9A-0D, port: 13)
1264 2015/08/21 19:45:51 Unauthenticated IP-MAC address and discarded by ip mac port binding (IP: 192.168.0.1, MAC: F8-1A-67-EC-9A-0D, port: 13)
1263 2015/08/21 19:45:35 Unauthenticated IP-MAC address and discarded by ip mac port binding (IP: 192.168.0.1, MAC: E8-94-F6-54-73-93, port: 2)
Похоже что-то у абонента с роутером, но почему нет этих мак-аддресов в секции blocked? Их вообще нет на коммутаторе.
Настройки:
Цитата:
DES-3526:admin#show config current_config inc "address_b"
Command: show config current_config include "address_b"
config address_binding ip_mac ports 1-24 state enable
enable address_binding dhcp_snoop
enable address_binding arp_inspection
disable address_binding acl_mode
config address_binding ip_mac ports 1-24 allow_zeroip enable
enable address_binding trap_log
config address_binding dhcp_snoop max_entry ports 1-24 limit 5
config address_binding dhcp_snoop max_entry ports 25-26 limit no_limit
config address_binding ip_mac ports 1-24 stop_learning_threshlod 500
DES-3526:admin#
Может старичку-коммутатору уже пора на покой? С другой стороны, еще пару часов назад он спокойно работал без IMPB.