Wired

last person joined: 18 hours ago 

Bring performance and reliability to your network with the Aruba Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of the ArubaOS-Switch and ArubaOS-CX devices, and find ways to improve security across your network to bring together a mobile first solution.
Expand all | Collapse all

STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

Jump to Best Answer
This thread has been viewed 30 times
  • 1.  STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

    Posted 25 days ago
    Dear Airheads,

    We have a Chromecast setup implementation in customer location. The Chromecast team connected a Mikrotik Router on the core switch (Aruba 5406). We noticed that the switch port starts flapping (stp blocking). Then we confirmed that the STP is disabled on the Mikrotik router and configure the switch port as below. But still the port is blocking by STP. 

    Please suggest.

    show run in 1/c7
    interface 1/C7
    untagged vlan 500
    spanning-tree admin-edge-port
    spanning-tree bpdu-filter
    exit


    Show logging
    I 04/11/21 14:35:03 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:03 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:35:08 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:35:14 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:14 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:35:20 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:35:25 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:25 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:35:30 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:35:36 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:36 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:35:41 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:35:47 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:47 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:35:51 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:35:57 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:57 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:02 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:36:08 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:36:08 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:13 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:36:18 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:36:18 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:24 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:36:30 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:36:30 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:35 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:36:40 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:36:40 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:45 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:36:51 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:36:51 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:56 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:37:01 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:37:01 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:37:06 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:37:12 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:37:12 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:37:17 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:37:23 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:37:23 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:37:28 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:37:33 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:37:33 00076 ports: ST2-CMDR: port 1/C7 is now on-line

    Reg,
    Shamz

    ------------------------------
    SHAMZUDHEEN NK
    ------------------------------


  • 2.  RE: STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

    Posted 25 days ago
    Has anyone taken a look at the logs on the mikrotik router? The STP events seem to be happening as a regular interval, maybe something is looped on their end?

    ------------------------------
    Dustin Burns
    ------------------------------



  • 3.  RE: STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

    Posted 25 days ago
    Thanks Dustin for your response..!!

    I need a clarification that, once "spanning-tree bpdu-filter" enable on the port, then will STP trigger on the port?

    Regarding the MikrotiK, there are only two cables connected to Core switch, one to vlan 500 and another vlan 508. so there is no chance for loop.
    any way let me inform the Mikrotik team to verify the logs.

    Reg,
    Shamz



    ------------------------------
    SHAMZUDHEEN NK
    ------------------------------



  • 4.  RE: STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

    Posted 25 days ago
    All BPDU filter does, is filters BPDUs send from another switches over that port in order to exclude it from STP root election and path calculations. Its the alternative to BPDU guard which will err-disable the port if a BPDU is detected, making you shut and no shut the port to bring it back. You would need to turn the port into a spanning-tree edge port, by using the "admin-edge-port". This will immediately move the port into forwarding. Use with caution though..

    ------------------------------
    Dustin Burns
    ------------------------------



  • 5.  RE: STP Blocks the interface even after configure the "spanning-tree bpdu-filter"
    Best Answer

    Posted 24 days ago
    Hello there,

    Those logs indicate a faulty cable or that it's trying to negotiate a higher speed than the cable is capable of.

    Try changing the cable or limit the speed. It's by default that the port is blocked by STP when it comes online, what it's not normal it's that it goes offline so often and repeatedly without having any protection on the other end.

    First try limiting the speed to 100Mbps

    Interface X speed auto-100

    And check the logs to see if the port continuous to flap or not.


    If it still happens, lower it to 10Mbps. This is just for verifying the state of the cabling. If this changes makes the link stable then just replace the cable.


    This issue has nothing to do with STP.


    Cheers,

    Aarón

    ------------------------------
    Aaron Fuentes Ohnell
    ------------------------------



  • 6.  RE: STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

    Posted 19 days ago
    Thanks for all,

    We found that, there is hardware issue in the Mikrotik router port. We changed the port and issue solved.

    Thanks for the support,

    Reg,
    Shamz

    ------------------------------
    SHAMZUDHEEN NK
    ------------------------------