We have a few DELL N3048P switch stacks that are producing a lot of logging messages:
NOT01-01-47-03#show ver
Machine Description............... Dell Networking Switch
System Model ID................... N3048P
Machine Type...................... Dell Networking N3048P
Serial Number..................... CN0RGC0T2829876R0429A01
Manufacturer...................... 0xbc00
Burned In MAC Address............. 28F1.0EFB.25D8
System Object ID.................. 1.3.6.1.4.1.674.10895.3060
SOC Version....................... BCM56340_A0
HW Version........................ 5
CPLD Version...................... 13
Image File........................ N3000_N2000v6.3.3.8
Software Capability............... ACCESS ROUTER
unit active backup current-active next-active
---- ----------- ----------- -------------- --------------
1 6.3.3.8 6.3.1.8 6.3.3.8 6.3.3.8
2 6.3.3.8 6.3.1.8 6.3.3.8 6.3.3.8
3 6.3.3.8 6.3.1.8 6.3.3.8 6.3.3.8
4 6.3.3.8 6.3.1.8 6.3.3.8 6.3.3.8
5 6.3.3.8 6.3.1.8 6.3.3.8 6.3.3.8
NOT01-01-47-03#show running-config | section logging
logging 10.80.126.159
exit
logging 10.80.129.159
level warnings
exit
logging source-interface loopback 0
sntp source-interface loopback 0
tacacs-server source-interface loopback 0
exit
Most of the interfaces have the same configuration on them:
NOT01-01-47-03#show running-config interface Gi2/0/25
ip dhcp snooping log-invalid
ip arp inspection limit rate 200 burst interval 1
description "USER-PORT"
spanning-tree portfast
switchport mode trunk
switchport trunk native vlan 2
switchport trunk allowed vlan 2-3
switchport port-security
switchport port-security dynamic 3
switchport port-security maximum 3
switchport port-security violation shutdown
These are the logging messages I receive.
<188> Dec 12 15:27:31 NOT01-01-47-03-5 DHCP_SNP[dtlTask]: ds_main.c(3004) 19939584 %% DHCP snooping dropping client message received on interface Gi1/0/23, vlan 300.
<188> Dec 12 15:27:29 NOT01-01-47-03-5 DHCP_SNP[dtlTask]: ds_util.c(1780) 19939583 %% DHCP packet: op Request, htype 1, hlen 6, hops 0, xid 29759346, secs 65535, ciaddr 10.79.50.33, yiaddr 0.0.0.0, server 0.0.0.0, giaddr 0.0.0.0, chaddr D4:78:56:02:74:DF.
<188> Dec 12 15:27:29 NOT01-01-47-03-5 DHCP_SNP[dtlTask]: ds_util.c(1738) 19939582 %% IP packet: ver/hlen 0x45, tos 0, len 328, id 0, flags/offset 0x40, ttl 63, proto 17, src 10.79.50.33, dst 10.86.128.12.
<188> Dec 12 15:27:29 NOT01-01-47-03-5 DHCP_SNP[dtlTask]: ds_util.c(1705) 19939581 %% Ethernet header: dest 00:00:5E:00:01:0A, src 28:F1:0E:FB:12:9B, type/len 0x8100.
<188> Dec 12 15:27:29 NOT01-01-47-03-5 DHCP_SNP[dtlTask]: ds_main.c(3009) 19939580 %% Source MAC address 28:F1:0E:FB:12:9B does not match client hardware address D4:78:56:02:74:DF. This message appears when DHCP Snooping drops the source mac address doest not match the clinet Hardware address.
<188> Dec 12 15:27:29 NOT01-01-47-03-5 DHCP_SNP[dtlTask]: ds_main.c(3004) 19939579 %% DHCP snooping dropping client message received on interface Gi2/0/25, vlan 300.
<188> Dec 12 15:27:29 NOT01-01-47-03-5 DHCP_SNP[dtlTask]: ds_util.c(1780) 19939578 %% DHCP packet: op Request, htype 1, hlen 6, hops 0, xid 2435572992, secs 65535, ciaddr 10.79.50.45, yiaddr 0.0.0.0, server 0.0.0.0, giaddr 0.0.0.0, chaddr D4:78:56:02:7D:AC
Also VLAN 300 is only configured on two ports per switch, I can not understand why we are receiving soo many messages.