ONTAP reports duplicate IP address alert but it is not found in any LIF
Applies to
ONTAP 9
Issue
- The following SNMP alert is reported:
2025/09/03 16:58:05 .1.3.6.1.4.1.789.0.14 Normal "Status Events" 10.254.xx.xx - .1.3.6.1.4.1.789.0.14 enterprises.789.0.14 A user-defined trap indicating an error condition, netinet.ethr.duplct.ipAdrr:Duplicate IP address 192.168.xx.xx!! sent from Ethernet address: 3c:fd:fe:xx:xx:xx.- The corresponding EMS log entry shows:
[?] Wed Sep 03 16:58:05 +0000 [node: kernel: netinet.ethr.duplct.ipAdrr:error]: Duplicate IP address 192.168.xx.xx!! sent from Ethernet address: 3c:fd:fe:xx:xx:xx.- The reported IP address is not assigned to any active LIF.
- EMS logs indicate that the LIF with this IP address was repeatedly added and removed within a short period:
[Nodename vifmgr: vifmgr.lifadded.byadmin:notice]: LIF lifname with ID 1040 (on virtual server 37465), IP address 192.168.xx.xx, was added.[Nodename vifmgr: vifmgr.lifBeingRemoved:notice]: LIF lifname (on virtual server 37463), IP address 192.168.xx.xx, is being removed from node nodename, port xx.