Client shows on Access switch as well as on Core

Here to help

Client shows on Access switch as well as on Core

Dear Experts,


We have deployed two MS425 switches as CORE and MS125 as Access switches.


In the client section, we have seen each client seems two times means the same client shows on the Access and Core switch.


So, please assist me to understand why this happens.

Kind of a big deal
Kind of a big deal

Is the client connected to the access switch, but going through the core switch to access other resources?  If so then I'd expect this as the client is a client on both switches.  On the 125 you should see the client on the physical port it is plugged into, on the core you should see it on the trunk port that links to the 125.

Kind of a big deal
Kind of a big deal

If you are using a combined network with both MX appliances and MS switches where the MS switches are routing your VLAN's and you are using track by mac address you will run into strange statistics.

Since the MX does deep packet inspection it can recognize more traffic types than the switches.  So what I believe happens is that traffic that is recognized as coming from your client on both the access switch and the MX is consolidated into one and attributed to your client.

However other traffic that only recognized by the MX will seem to originate from the mac address of the coreswitch point to point interface pointing to the MX.  And the dashboard has the strange behavior of choosing a tracked client to attach it's name to it.

You can verify this if you check that duplicate client as having the MAC address of the core switch.


Usually if you are running a layer 3 core you should have a separate network for your MX where you track by IP and another for your switches/AP's/sensors/etc...  This is cumbersome and that is why Meraki came out with the track by unique client identifier, however I have not been able to see this run stably in any environment.


So I am extremely curious what the science is behind it, how flows are married between MX and MS/MR tracking and where they are with the implementation of unique client identifier since that has been in BETA for a long while now.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.