I went to install eventlog1002 today, and I see the following when it hits install1002:

Feb  1 19:00:09 install1002 dhcpd: DHCPDISCOVER from 14:18:77:5b:0d:42 via 10.64.48.2: network 10.64.48.0/22: no free leases
Feb  1 19:00:09 install1002 dhcpd: DHCPDISCOVER from 14:18:77:5b:0d:42 via 10.64.48.3: network 10.64.48.0/22: no free leases

Checking its network port, it shows down. It shouldn't be able to hit dhcp at all. All of this is checked on asw2-d-eqiad.

Interface       Admin Link Description
ge-3/0/32       up    down eventlog1002

Double checking the mac of eventlog1002:

NIC.Embedded.1-1-1      Ethernet                = 14:18:77:5B:0D:42

So then my next step is to check if its on the right port. Using some juniper commands to check mac info. If a system routes through the switch's switching table, it gets added.

robh@asw2-d-eqiad> show ethernet-switching table interface ge-3/0/32 

MAC database for interface ge-3/0/32

MAC database for interface ge-3/0/32.0

No entires for that port, so eventlog1002 is likely plugged into another port. Tryign to find it with just show ethernet-switching table doesn't show ANY entry for the mac address for eventlog1002. This is confusing to me, since my understanding is if its passing through the stack, it gets added to the switching table.

I suppose the first step is on-site tracing of eventlog1002 production network to see where it plugs in. Our switch config shows it on asw2-d-eqiad:ge-3/0/32, set in the private1-d-eqiad vlan.