Wired Intelligent Edge

 View Only
last person joined: 18 hours ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Expand all | Collapse all

Core Switch Issue 5412zl

This thread has been viewed 0 times
  • 1.  Core Switch Issue 5412zl

    Posted Sep 19, 2017 06:08 AM

    Hi All

    we have come across an issue on our 5412zl core switch, suddenly i got this message in the logs.

    W 09/19/17 14:12:09 02581 ip: ST1-CMDR: IPv4: Duplicate IPv4 address 10.10.40.71
                is detected on VLAN 1 with a MAC address of 9cdc71-04c27f (133 times
                in 60 seconds)

    My VLan 1 ip address is 10.10.40.71 when i run the command sh spanning tree

    MRF-DC-CORE-SW# sh spanning-tree

     Multiple Spanning Tree (MST) Information

      STP Enabled   : Yes
      Force Version : MSTP-operation
      IST Mapped VLANs : 1-4094
      Switch MAC Address : 9cdc71-04c27f  (the same mac address which is shown in the logs)
      Switch Priority    : 32768
      Max Age  : 20
      Max Hops : 20
      Forward Delay : 15

    ----------------------------------------------------------------------------------------

    The consequence we faced was all the vlans on the switch went to disable mode and then got enabled there was total down time of 12 mins,

    belong is logs for one vlan

    I 09/19/17 14:12:11 00839 stp: ST1-CMDR: CST Root changed from 32768:
                0002b9-32e200 to 32768: 0019bb-93c700
    I 09/19/17 14:12:12 00839 stp: ST1-CMDR: CST Root changed from 32768:
                0019bb-93c700 to 32768: 001279-03da00
    I 09/19/17 14:12:12 00435 ports: ST1-CMDR: port 1/I12 is Blocked by STP
    I 09/19/17 14:12:12 00002 vlan: ST1-CMDR: Administrator_Vlan_54 virtual LAN
                disabled
    I 09/19/17 14:12:12 00002 vlan: ST1-CMDR: ITS_SAP_CG virtual LAN disabled
    I 09/19/17 14:12:12 00435 ports: ST1-CMDR: port 1/I4 is Blocked by STP
    I 09/19/17 14:12:12 00076 ports: ST1-CMDR: port 1/I4 in Trk54 is now on-line
    I 09/19/17 14:12:12 00001 vlan: ST1-CMDR: Administrator_Vlan_54 virtual LAN
                enabled

    -----------------------------------------------------------------------------------

    Have any one has come across any such issue my environmnet is working prefectly since last 8months since the installation of core 5412 zl.

    All your help and support is appreciated.

     

     

     


    #Spanningtreeissue
    #54122zl
    #coreswitch
    #STP


  • 2.  RE: Core Switch Issue 5412zl

    Posted Nov 02, 2017 06:21 AM

    At the very least you need to change your core switch STP priority to 0.

    Some other settings that might be useful:

    spanning-tree
    spanning-tree A1 admin-edge-port
    spanning-tree A2 admin-edge-port
    spanning-tree B4 admin-edge-port
    spanning-tree B7 root-guard
    spanning-tree B8 root-guard
    spanning-tree B9 root-guard
    spanning-tree B10 root-guard
    spanning-tree F1 root-guard
    spanning-tree F4 root-guard
    no spanning-tree bpdu-throttle
    spanning-tree trap topology-change instance cst
    spanning-tree trap errant-bpdu new-root root-guard loop-guard
    spanning-tree bpdu-protection-timeout 120 priority 0


  • 3.  RE: Core Switch Issue 5412zl

    Posted Nov 03, 2017 12:13 AM

    Thank you Richard for the reply.

    The above issue happned on my core switch which is running VSF Virtual switching. VSF is configure in two 5412Zl switch.

    Currently i have made the 5412Zl which is my core switch STP priority 0.

    MRF-DC-CORE-SW# sh spanning-tree

     Multiple Spanning Tree (MST) Information

      STP Enabled   : Yes
      Force Version : MSTP-operation
      IST Mapped VLANs : 1-4094
      Switch MAC Address : 9cdc71-04c27f
      Switch Priority    : 0
      Max Age  : 20
      Max Hops : 20
      Forward Delay : 15

      Topology Change Count  : 149,862
      Time Since Last Change : 3 mins

      CST Root MAC Address : 9cdc71-04c27f
      CST Root Priority    : 0
      CST Root Path Cost   : 0
      CST Root Port        : This switch is root

    From my core switch I have close to 80 L2/L3 switch connecting to my access layer.

    as per your suggestion if do configure port A1 as admin-edge-point the down side switch connecting will have issues ?

    spanning-tree A1 admin-edge-port

    Please share with me some document to do these config. since i am new to Hp OS and the configuration commands.