My company recently bought another company whose IT is a bit of a mess.
They've had loads of network issues, mainly broadcasts taking a while to respond (around 30 seconds). To resolve this I replaced all their switches with 6 of these link
All six switches are setup the same;
One core and five edge (no special settings, just how they're connected - using port 1).
default vLAN 0 is for the desktops and servers - 192.168.0.0/24
vLAN 1 for voice - 192.168.1.0/24
Port 1 - 23 can be used for both vLANs
Port 24 is setup as a trunk port and assigned for the phone. The phone system is connected to the core, the other port 24's are empty.
I manually connected all the cables so i'm 100% sure each edge switch is only connected to the core once and is not connected to any other switch.
After I replaced the switches the spanning tree issues were minimal (i could see them in wireshark) and the network issues were resolved.
14 hours later the network issues returned and spanning tree became more prominent.
The wireshark logs show the spanning tre issues are all coming from a single MAC to a different single MAC.
I did a port scan and looked at the arp cache, but couldnt find the MAC against an IP.
The wireshark data highlights the packet as coming from an HP device and the MAC address matches a couple of the switches, but with 07 on the last two digits.
I'm guessing the issue is coming from a specific port. Does anyone know how to get the MAC addresses assigned to each port?
Also, it looks like spanning tree kicks in after 30 seconds. However I notice they support Rapid Spanning Tree, which kicks in after 2 seconds. While this doesnt remove the issue, it will give me some breathing space.
I know very little about this sort of thing, so all help welcome on how to detect the port MAC addresses and enabling Rapid Spanning Tree.