Solved

spanning tree help

Posted on 2011-03-10
4
413 Views
Last Modified: 2012-05-11
Hi,

 i have uplinks from core switches that connect to Virgin WAN router configured as access ports and in vlan 999. By mistake a cable is plugged in thats configured in different vlan and has portfast set. This leads to error message of not in common subnet and all ports in vlan999 being blocked until reconvergence.

This seemed to take a long time and I want  to avoid it happening again. I think if i set all ports except uplinks with bpduguard so they error disable if a switch is plugged in, this would stop some problems. But would this help protect against the not in common subnet error and blockign affecting all switches on vlan 999?

Is spanning tree detecting a loop when it gives not in common subnet ?Thanks
0
Comment
Question by:jly999
  • 2
4 Comments
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 35095241
Hi,

You need to set bootg devices same native vlan

conf t
 int x/x
 switchport trunk native vlan 999
0
 
LVL 17

Expert Comment

by:MAG03
ID: 35127643
The not on common subnet error just means that there are two different subnets trying to use the same vlan.

BPDUguard will not stop the not on common subnet error.  It will just shutdown the port if someone tries to connect a switch to that access port. However, since the port that a switch was just connected is shut down when BPDUs are detected, the not on common subnet will not happen.
0
 

Author Comment

by:jly999
ID: 35146529
thanks a lot for the comments

i wonder is it good practice to have uplink ports set as access with bpduguard set?
or better to have trunk ports with native vlan, or it doesnt matter?

Is it standard for STP to block everything and reconverge if it sees two subnets trying to use the same vlan?
0
 
LVL 17

Accepted Solution

by:
MAG03 earned 500 total points
ID: 35146596
if by uplink port you mean access ports then yes, best practice is to set all non inter switch ports as access ports and configure bpduguard on those ports aswell.

It is also best practice to set an unused vlan to be the native vlan.

Spanning-tree only looks for and prevents loops, it doesn't see or care if two subnets are trying to use the same vlan.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now