Interface restart after receiving igmp pocket

Mar 21, 2006 9 Replies
K

Hi All.



I have a problem with my Cisco 3550. One of the interfaces restarts after receiving igmp pocket. I have an access-list on this interface and it logs this messages:



%SEC-6-IPACCESSLOGRP: list 151 denied igmp 0.0.0.0 -> 224.0.0.2, 1 packet %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan5, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan5, changed state to down Interface FastEthernet0/5, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to up %SEC-6-IPACCESSLOGRP: list 151 denied igmp 0.0.0.0 -> 224.0.0.2, 1 packet %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan5, changed state to up



Anyone could help me with this problem? Has anyone face this problem before and just know what is the reason, and of course how to get rid of it?



Thanks!



-- ksiaze


Vote
Twitter Facebook LinkedIn
K

Not "pocket" but packet ;-) Sorry for my mistake.

-- ksiaze

Vote
Twitter Facebook LinkedIn
K

Router#show version Cisco Internetwork Operating System Software IOS (tm) C3550 Software (C3550-I5Q3L2-M), Version 12.1(12c)EA1, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2002 by cisco Systems, Inc.

-- ksiaze

Vote
Twitter Facebook LinkedIn
M

Many IGMP bugs in 12.1

Suggest you upgrade to 12.1(22)EA7 and see if problem persists

Vote
Twitter Facebook LinkedIn
K

But I have more C3550 switches running in my network and none of them has such a problem. All other switches runs the same IOS software. So, why only this one switch is causing the problem?

-- ksiaze

Vote
Twitter Facebook LinkedIn
M

Are the other switches displaying " %SEC-6-IPACCESSLOGRP: list 151 denied igmp 0.0.0.0 -> 224.0.0.2, 1 packet " message ?

Vote
Twitter Facebook LinkedIn
K

One of the other switches is displaying this information "%SEC-6-IPACCESSLOGRP: list 131 denied igmp 169.191.196.190 ->

224.0.0.2, 1 packet". But this switch works fine.

-- ksiaze

Vote
Twitter Facebook LinkedIn
M

So what is unique about the first switch is that the source address of the IGMP packet is 0.0.0.0 which is an invalid source address. IPv4 source address of 0.0.0.0 should only be used if the destiantion address is 255.255.255.255

Do you know the device that is sourcing these packets - capture these packets and examine the source MAC address?

Vote
Twitter Facebook LinkedIn
M

Do you have IGMP snooping enabled ?

If so please post switch config

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required