Wired Intelligent Edge

 View Only
last person joined: 15 hours ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

Aruba 2930F MSTP

This thread has been viewed 43 times

  • 1.  Aruba 2930F MSTP

    Posted Jan 04, 2022 06:03 AM
    Hello All,
    I need a little help to understand the Aruba MSTP...

    I've read in the blog: https://community.arubanetworks.com/blogs/esupport1/2018/06/22/how-are-the-spanning-tree-port-parameters-auto-edge-port-admin-edge-port-and-bpdu-protection-used
    That for a edge port witch is connected to a client pc I should use the admin-edge-port to immediately go into the forwarding state.

    "With "admin-edge-port" and "auto-edge-port" enabled, the port will immediately go into the forwarding state:"
    So I've configured my 2930f like this:

    spanning-tree
    spanning-tree 1 admin-edge-port
    spanning-tree 1 bpdu-protection
    spanning-tree 2 admin-edge-port
    spanning-tree 2 bpdu-protection
    spanning-tree 3 admin-edge-port
    spanning-tree 3 bpdu-protection
    spanning-tree 4 admin-edge-port
    spanning-tree 4 bpdu-protection
    spanning-tree 5 admin-edge-port
    spanning-tree 5 bpdu-protection
    spanning-tree 6 admin-edge-port
    spanning-tree 6 bpdu-protection
    spanning-tree 7 admin-edge-port
    spanning-tree 7 bpdu-protection
    spanning-tree 8 admin-edge-port
    spanning-tree 8 bpdu-protection
    spanning-tree 9 admin-edge-port
    spanning-tree 9 bpdu-protection
    spanning-tree 10 admin-edge-port
    spanning-tree 10 bpdu-protection
    spanning-tree 11 admin-edge-port
    spanning-tree 11 bpdu-protection
    spanning-tree 12 admin-edge-port
    spanning-tree 12 bpdu-protection
    spanning-tree 13 admin-edge-port
    spanning-tree 13 bpdu-protection
    spanning-tree 14 admin-edge-port
    spanning-tree 14 bpdu-protection
    spanning-tree 15 admin-edge-port
    spanning-tree 15 bpdu-protection
    spanning-tree 16 admin-edge-port
    spanning-tree 16 bpdu-protection
    spanning-tree 17 admin-edge-port
    spanning-tree 17 bpdu-protection
    spanning-tree 18 admin-edge-port
    spanning-tree 18 bpdu-protection
    spanning-tree 19 admin-edge-port
    spanning-tree 19 bpdu-protection
    spanning-tree 20 admin-edge-port
    spanning-tree 20 bpdu-protection
    spanning-tree 21 admin-edge-port
    spanning-tree 21 bpdu-protection
    spanning-tree 22 admin-edge-port
    spanning-tree 22 bpdu-protection
    spanning-tree 23 admin-edge-port
    spanning-tree 23 bpdu-protection
    spanning-tree 24 bpdu-protection
    spanning-tree 25 admin-edge-port
    spanning-tree 25 bpdu-protection
    spanning-tree 26 admin-edge-port
    spanning-tree 26 bpdu-protection
    spanning-tree 27 admin-edge-port
    spanning-tree 27 bpdu-protection
    spanning-tree 28 admin-edge-port
    spanning-tree 28 bpdu-protection
    spanning-tree 29 admin-edge-port
    spanning-tree 29 bpdu-protection
    spanning-tree 30 admin-edge-port
    spanning-tree 30 bpdu-protection
    spanning-tree 31 admin-edge-port
    spanning-tree 31 bpdu-protection
    spanning-tree 32 admin-edge-port
    spanning-tree 32 bpdu-protection
    spanning-tree 33 admin-edge-port
    spanning-tree 33 bpdu-protection
    spanning-tree 34 admin-edge-port
    spanning-tree 34 bpdu-protection
    spanning-tree 35 admin-edge-port
    spanning-tree 35 bpdu-protection
    spanning-tree 36 admin-edge-port
    spanning-tree 36 bpdu-protection
    spanning-tree 37 admin-edge-port
    spanning-tree 37 bpdu-protection
    spanning-tree 38 admin-edge-port
    spanning-tree 38 bpdu-protection
    spanning-tree 39 admin-edge-port
    spanning-tree 39 bpdu-protection
    spanning-tree 40 admin-edge-port
    spanning-tree 40 bpdu-protection
    spanning-tree 41 admin-edge-port
    spanning-tree 41 bpdu-protection
    spanning-tree 42 admin-edge-port
    spanning-tree 42 bpdu-protection
    spanning-tree 43 admin-edge-port
    spanning-tree 43 bpdu-protection
    spanning-tree 44 admin-edge-port
    spanning-tree 44 bpdu-protection
    spanning-tree 45 admin-edge-port
    spanning-tree 45 bpdu-protection
    spanning-tree 46 admin-edge-port
    spanning-tree 46 bpdu-protection
    spanning-tree 47 admin-edge-port
    spanning-tree 47 bpdu-protection
    spanning-tree 48 admin-edge-port
    spanning-tree 48 bpdu-protection
    spanning-tree 49 loop-guard
    spanning-tree 50 loop-guard
    spanning-tree 51 loop-guard
    spanning-tree 52 loop-guard
    spanning-tree config-name "01MYMSPT"
    spanning-tree instance 1 vlan 1-6 8-47 49-909 911-4094
    spanning-tree instance 2 vlan 7 48 910
    spanning-tree pathcost mstp 8021d
    spanning-tree trap errant-bpdu
    spanning-tree bpdu-protection-timeout 15 priority 0

    But when I disable and enable port 1 the logging is showing that the Port is been disabled by stp ...

    I 01/03/22 00:54:56 00076 ports: port 1 is now on-line
    I 01/03/22 00:54:56 00435 ports: port 1 is Blocked by STP
    I 01/03/22 00:54:53 00077 ports: port 1 is now off-line
    I 01/03/22 00:54:51 00076 ports: port 1 is now on-line
    I 01/03/22 00:54:51 00435 ports: port 1 is Blocked by STP
    I 01/03/22 00:54:41 00077 ports: port 1 is now off-line

    So the question is, why is the port not immediately going into the forwarding state?

    Regards,
    Michael

    ------------------------------
    Michael Pilling
    ------------------------------


  • 2.  RE: Aruba 2930F MSTP

    MVP GURU
    Posted Jan 04, 2022 07:22 AM
    Hi Michael,

    In reverse order:

    (1) I 01/03/22 00:54:41 00077 ports: port 1 is now off-line <---- With (1) you manually disabled the interface at 00:54:41
    (2) I 01/03/22 00:54:51 00435 ports: port 1 is Blocked by STP <-- 10' after (1) - at 00:54:51 - the interface 1 is blocked by STP
    (3) I 01/03/22 00:54:51 00076 ports: port 1 is now on-line <----- Immediately with (2) - at the same time - the interface 1 is automatically enabled

    Idem for the next test you did (again in reverse order):

    (4) I 01/03/22 00:54:53 00077 ports: port 1 is now off-line <---- With (4) you manually disabled the interface at 00:54:53
    (5) I 01/03/22 00:54:56 00435 ports: port 1 is Blocked by STP <-- 3' after (4) - at 00:54:56 - the interface 1 is blocked by STP
    (6) I 01/03/22 00:54:56 00076 ports: port 1 is now on-line <----- Immediately with (5) - at the same time - the interface 1 is automatically enabled

    So what?

    Are you so kind to post the outputs of these two commands:

    show running-config interface 1
    show spanning-tree ethernet 1 detail

    ------------------------------
    Davide Poletto
    ------------------------------

    Original Message


  • 3.  RE: Aruba 2930F MSTP

    Posted Jan 04, 2022 08:41 AM
    Dear Davide,
    I was totally sure that I disabled the port only once...
    But after your post I repeated the test an the result is the same:

    Keys: W=Warning I=Information
    M=Major D=Debug E=Error
    ---- Reverse event Log listing: Events Since Boot ----

    I 01/03/22 03:51:57 00076 ports: port 1 is now on-line
    I 01/03/22 03:51:57 00435 ports: port 1 is Blocked by STP
    I 01/03/22 03:51:54 00077 ports: port 1 is now off-line
    I 01/03/22 03:51:53 00076 ports: port 1 is now on-line
    I 01/03/22 03:51:53 00435 ports: port 1 is Blocked by STP
    I 01/03/22 03:51:50 00077 ports: port 1 is now off-line
    I 01/03/22 03:51:50 00076 ports: port 1 is now on-line
    I 01/03/22 03:51:50 00435 ports: port 1 is Blocked by STP
    I 01/03/22 03:51:48 00077 ports: port 1 is now off-line
    I 01/03/22 03:51:31 00076 ports: port 1 is now on-line
    I 01/03/22 03:51:31 00435 ports: port 1 is Blocked by STP - after 15 seconds I enabled the port
    I 01/03/22 03:51:12 00077 ports: port 1 is now off-line - I disabled the port

    I see this behaviour at many 2930F switches...

    Best regards,
    Michael

    ------------------------------
    Michael Pilling
    ------------------------------

    Original Message


  • 4.  RE: Aruba 2930F MSTP

    MVP GURU
    Posted Jan 04, 2022 01:37 PM
    Hi Michael, yeah I see...question: what edge device is connected on port 1 (if any)?

    I note (always in reverse order, older first), just before the flapping starting at 03:51:48, this:

    I 01/03/22 03:51:12 00077 ports: port 1 is now off-line <---- I disabled the port
    I 01/03/22 03:51:31 00435 ports: port 1 is Blocked by STP <-- after 15 seconds I enabled the port
    I 01/03/22 03:51:31 00076 ports: port 1 is now on-line <----- ...and the port 1 immediately changes its state (blocking -> forwarding)
    I 01/03/22 03:51:48 00077 ports: port 1 is now off-line <---- this looks strange: 17 seconds after the STP changed the port's state the port went off-line (not manually)

    My doubts focus on the edge (connected on that port).

    I also want to ask you: which ArubaOS-Switch software version is your Aruba 2930F currently running on?





    ------------------------------
    Davide Poletto
    ------------------------------

    Original Message


  • 5.  RE: Aruba 2930F MSTP

    Posted Jan 05, 2022 05:57 AM
    Dear Davide,

    The Firmware Version is WC.16.11.0002
    At the port is a client computer connected a Dell OptiPlex 5040 MT

    So there should be no bpdu packages or somethng else witch forces the spanning tree to check and disable the port.

    Here is the output of the commands:

    show running-config interface 1:
    ---------------------------------
    Running configuration:

    interface 1
    untagged vlan 1
    spanning-tree admin-edge-port
    spanning-tree bpdu-protection
    exit


    show spanning-tree ethernet 1 detail
    -------------------------------------
    Status and Counters - CST Port(s) Detailed Information


    Note : * indicates values dynamically overridden by user-role

    Port : 1
    Status : Up
    BPDU Protection : Yes
    BPDU Filtering : No
    PVST Protection : No
    PVST Filtering : No
    Errant BPDU Count : 0
    Root Guard : No
    Loop Guard : No
    TCN Guard : No
    MST Region Boundary : Yes
    External Path Cost : 0
    External Root Path Cost : 0
    Administrative Hello Time : Global
    Operational Hello Time : 2
    AdminEdgePort : Yes
    Auto Edge Port : Yes
    OperEdgePort : Yes
    AdminPointToPointMAC : True
    OperPointToPointMAC : Yes
    Aged BPDUs Count : 0
    Loop-back BPDUs Count : 0
    TC ACK Flag Transmitted : 0
    TC ACK Flag Received : 0
    Topology Changes Detected : 0
    Topology Changes Tx : 0
    Topology Changes Rx : 0

    MST MST CFG CFG TCN TCN
    BPDUs Tx BPDUs Rx BPDUs Tx BPDUs Rx BPDUs Tx BPDUs Rx
    ---------- ---------- ---------- ---------- ---------- ----------
    239461 0 0 0 0 0

    regards,
    Michael

    ------------------------------
    Michael Pilling
    ------------------------------

    Original Message


  • 6.  RE: Aruba 2930F MSTP

    MVP GURU
    Posted Jan 05, 2022 09:58 AM
    It looks like something related to the device's NIC (Are Firmware/OS drivers fully updated?), that "Blocked by STP" could be misleading (every time a port changes its state the STP kicks in to do its checks); what I see here is a port changing its state on->off (causing a series of forwarding->blocking->forwarding cycles) but blocking->forwarding happens immediately (duration: sub-second) so, IMHO, the device's port is flapping (goes into a mad cycle of go-to-sleep-and-then-wake-up)...so the question should be: why it flaps? have you considered the idea of setting the device's NIC Ethernet Port with the "Do not allow the PC to put this device to sleep" option (Power Settings)? maybe it helps...

    I guess that the connected device's NIC Port is really flapping at random and that is not due to STP, I mean the STP just kicks-in to do its checks (AFAIK the port under test is indeed configured with proper spanning-tree admin-edge-port option set to true which, along with the auto-edge-port option enabled, makes the port switching time from STP blocking state to STP forwarding state totally immediate).

    ------------------------------
    Davide Poletto
    ------------------------------

    Original Message


  • 7.  RE: Aruba 2930F MSTP

    Posted Jan 07, 2022 03:40 AM
    Dear Davide,
     
    after some testing and upgrading to the Firmware Version is WC.16.11.0003 I'm thinking the firmware is buggie...
    Withe the Firmware Version WC.16.11.0003 the switch reacts like we aspect:

    Logging in reverse order:

    I 01/07/22 09:22:15 00076 ports: port 17 is now on-line - the port goes directly in the forwarding state
    I 01/07/22 09:22:15 00435 ports: port 17 is Blocked by STP - plug in the cable
    I 01/07/22 09:22:08 00077 ports: port 17 is now off-line - unplugging the cable

    So I will update all Aruba 2930F to this firmware...
    Best regards





    ------------------------------
    Michael Pilling
    ------------------------------

    Original Message