Problem with ProCurve 2650 and ip source-lockdown

[Axel Freyn]

Hello,

We have to identical ProCurve 2650 switches, both with the last firmware and identical configuration.

Since a few days, we have terrible performance and huge packet drops (Drops Rx) whenever "ip source-lockdown" is activated on one switch (let's call it switch1; the other one (switch2) works perfectly well):
When transferring 100MB-file:

- between two computers connected to switch2, we have ~12MB/s (independent of the status of "source-lockdown") and no packet drops.

- between two computers connected to switch1, when source-lockdown is deactivated on BOTH ports, we have ~12MB/s and no packet drops

- between two computers connected to switch1, when the data LEAVES the switch at a port with "source-lockdown", we have ~10MB/s, and a few packet Drops in the other direction

- between two computers connected to switch1, when the data ENTERS the switch at a port with "source-lockdown", we have ~1.2MB/s, and ~20% of the packets appear as "Drop RX"

- between two computers connected to switch1, when source-lockdown is activated on both ports, we have ~0.7MB/s, and packet drops at both interfaces.

So: as soon as we activate source-lockdown on the problematic switch1, the network performance breaks down completely. When source-lockdown is deactivated, we have again good performance.

We already tried to restart all switches at the same time - this did not change anything.

Any good ideas what we could try?

Thanks,

Axel