topic Re: is there a way to see/log MAC address table activity and history? in ICX Switches

is there a way to see/log MAC address table activity and history?

jerry_ku — Fri, 17 May 2019 18:30:14 GMT

I use Brocade ICX 6450 switches and sometimes my end-users will unplug devices, move them to different ports and so on

it would be helpful to have a log of port and MAC address activity/changes. Is it possible?

Re: is there a way to see/log MAC address table activity and history?

andrew_giancol1 — Fri, 17 May 2019 18:32:26 GMT

we chased this rabbit a few weeks ago. use 802.1x or NAC to control and log.
https://www.ruckuswireless.com/products/software-and-saas/cloudpath
I edited this and added Ruckus's security offering.

Re: is there a way to see/log MAC address table activity and history?

BenBeck — Fri, 17 May 2019 18:45:40 GMT

You could use the mac-movement notification feature:

http://docs.ruckuswireless.com/fastiron/08.0.30/fastiron-08030-l2guide/GUID-252D70AC-FAF4-4E27-A39B-AFB5DA3F7B6F.html

Re: is there a way to see/log MAC address table activity and history?

jijo_panangat — Sun, 19 May 2019 10:50:13 GMT

Hello Jerry,

Here is a sample config and its output.

The following example enables notification of MAC address moves and sends an SNMP trap when any MAC address moves to a different port five times in a 10-second interval.

CX6430-24 Switch(config)#mac-movement notification threshold-rate 5 sampling-interval 10

ICX6430-24 Switch(config)#show notification mac-movement threshold-rate

Threshold-Rate Mac Movement Notification is ENABLED

Configured Threshold-Rate : 5 moves

Configured Sampling-Interval : 10 seconds

Number of entries in the notification table : 0

MAC-Address from-Port to-Port Last Move-Time Vlan-id
-------------- --------- ------- -------------- -------