MAC move - up to 1000 times per hour!

[Peer-JoachimK]

Hi,

we had some hardware trouble a few days ago (POE disappeared on a X465P) together with a malicious telephone (broadcast storm). We detached the telephone (-> broadcast gone) and also replaced the switch. But since that time we see  this kind of message on all stacks (using netlogin) in the network:

Slot-1: The authentication state of Network Login user XXX  was cleared by policy
due to Admin Reset (MAC move), Mac XXX port 3:2 VLAN(s) "VL_XYZ" Protocol(s) "MAC"

We see 600-1000 MAC moves per hour. Some of the stack masters are rebooting after some time.
How is the event (Admin Rest) triggered ?
Is there a way to find some usefull information within the XMC ?

We did not touch the network configuration for the past 2 month.

Any help/idea is welcome!

Bye, Peer

[Peer-JoachimK · Accepted solution]

We fixed the problem, but still does not know what happened ....
One SMLT link to a stack caused the problem. Both VSP have been rebooted without success.
We shutdown one link and the problem was gone. The link is up and running now and we haven't seen any mac move.
The SMLT link must have been the problem. Why the reboot did not solve the problem is strange.

Bye, Peer