Wired Intelligent Edge

 View Only
last person joined: yesterday 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

This thread has been viewed 33 times

  • 1.  STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

    Posted Apr 12, 2021 02:42 AM
    Dear Airheads,

    We have a Chromecast setup implementation in customer location. The Chromecast team connected a Mikrotik Router on the core switch (Aruba 5406). We noticed that the switch port starts flapping (stp blocking). Then we confirmed that the STP is disabled on the Mikrotik router and configure the switch port as below. But still the port is blocking by STP. 

    Please suggest.

    show run in 1/c7
    interface 1/C7
    untagged vlan 500
    spanning-tree admin-edge-port
    spanning-tree bpdu-filter
    exit


    Show logging
    I 04/11/21 14:35:03 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:03 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:35:08 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:35:14 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:14 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:35:20 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:35:25 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:25 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:35:30 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:35:36 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:36 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:35:41 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:35:47 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:47 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:35:51 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:35:57 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:35:57 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:02 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:36:08 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:36:08 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:13 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:36:18 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:36:18 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:24 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:36:30 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:36:30 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:35 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:36:40 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:36:40 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:45 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:36:51 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:36:51 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:36:56 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:37:01 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:37:01 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:37:06 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:37:12 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:37:12 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:37:17 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:37:23 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:37:23 00076 ports: ST2-CMDR: port 1/C7 is now on-line
    I 04/11/21 14:37:28 00077 ports: ST2-CMDR: port 1/C7 is now off-line
    I 04/11/21 14:37:33 00435 ports: ST2-CMDR: port 1/C7 is Blocked by STP
    I 04/11/21 14:37:33 00076 ports: ST2-CMDR: port 1/C7 is now on-line

    Reg,
    Shamz

    ------------------------------
    SHAMZUDHEEN NK
    ------------------------------


  • 2.  RE: STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

    MVP GURU
    Posted Apr 12, 2021 07:36 AM
    Has anyone taken a look at the logs on the mikrotik router? The STP events seem to be happening as a regular interval, maybe something is looped on their end?

    ------------------------------
    Dustin Burns
    ------------------------------

    Original Message


  • 3.  RE: STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

    Posted Apr 12, 2021 08:44 AM
    Thanks Dustin for your response..!!

    I need a clarification that, once "spanning-tree bpdu-filter" enable on the port, then will STP trigger on the port?

    Regarding the MikrotiK, there are only two cables connected to Core switch, one to vlan 500 and another vlan 508. so there is no chance for loop.
    any way let me inform the Mikrotik team to verify the logs.

    Reg,
    Shamz



    ------------------------------
    SHAMZUDHEEN NK
    ------------------------------

    Original Message


  • 4.  RE: STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

    MVP GURU
    Posted Apr 12, 2021 09:05 AM
    All BPDU filter does, is filters BPDUs send from another switches over that port in order to exclude it from STP root election and path calculations. Its the alternative to BPDU guard which will err-disable the port if a BPDU is detected, making you shut and no shut the port to bring it back. You would need to turn the port into a spanning-tree edge port, by using the "admin-edge-port". This will immediately move the port into forwarding. Use with caution though..

    ------------------------------
    Dustin Burns
    ------------------------------

    Original Message


  • 5.  RE: STP Blocks the interface even after configure the "spanning-tree bpdu-filter"
    Best Answer

    Posted Apr 13, 2021 03:07 AM
    Hello there,

    Those logs indicate a faulty cable or that it's trying to negotiate a higher speed than the cable is capable of.

    Try changing the cable or limit the speed. It's by default that the port is blocked by STP when it comes online, what it's not normal it's that it goes offline so often and repeatedly without having any protection on the other end.

    First try limiting the speed to 100Mbps

    Interface X speed auto-100

    And check the logs to see if the port continuous to flap or not.


    If it still happens, lower it to 10Mbps. This is just for verifying the state of the cabling. If this changes makes the link stable then just replace the cable.


    This issue has nothing to do with STP.


    Cheers,

    Aarón

    ------------------------------
    Aaron Fuentes Ohnell
    ------------------------------

    Original Message


  • 6.  RE: STP Blocks the interface even after configure the "spanning-tree bpdu-filter"

    Posted Apr 17, 2021 12:41 PM
    Thanks for all,

    We found that, there is hardware issue in the Mikrotik router port. We changed the port and issue solved.

    Thanks for the support,

    Reg,
    Shamz

    ------------------------------
    SHAMZUDHEEN NK
    ------------------------------

    Original Message