?
Solved

ARP Broadcast Storms with HP 1910 switches

Posted on 2014-11-19
6
Medium Priority
?
1,464 Views
Last Modified: 2014-11-19
Hello,

We’ve started deploying HP 1910 8 port switches to isolated areas of our network, because they are reasonably priced. Our core devices are HP 28xx series switches and Cisco 29xx series switches.

We’ve noticed that the HP 1910 units aggressively broadcast ARP requests for everything in their ARP tables. We have about 30 of the 1910’s now, and they’re responsible for 90% of our internal network traffic—2,000-4,000 packets per second of nothing but ARP requests.

It does calm down every now and then—you might get 30 seconds while nothing is transmitting, then it starts up again. Watching an individual switch’s traffic, they seem to chatter every 2-3 minutes, which roughly matches the ARP ageing default. The problem is, for an ARP table with 100 entries, it might send 20k ARP requests!

Does anyone have any ideas on how to make these calm down, or at least make them act like our Cisco and 28xx series switches, that don’t have this kind of flooding issue?
0
Comment
Question by:MarktheNerd
  • 3
  • 3
6 Comments
 
LVL 32

Expert Comment

by:Predrag
ID: 40453039
That's not switch issue. That's network design problem.
a) you need to reduce number of hosts per VLAN
b) maybe there's a network loop
c) you need to set ports for host to portfast to reduce broadcast (this is optional and short term solution)
0
 

Author Comment

by:MarktheNerd
ID: 40453044
So even though only one specific switch model has the issue, it's a network design problem? Why wouldn't the other switches be displaying the same behavior, if it was a design issue?
0
 
LVL 32

Assisted Solution

by:Predrag
Predrag earned 2000 total points
ID: 40453122
Switch by itself, without any reason don't produce such traffic (except broken ones - but broken is reason, isn't it?). If there is network loop that could explain that behavior. Or if ports for hosts are not in portfast mode.
First - network loop is self explanatory.
Second - every time someone turn on PC (if portfast is not issued to port) STP  start panicking  when receive TCN (topology change notification) - there's a change in network, and side effect of that is that switch reduces time for relearning MAC address in MAC address table from default 300 second to 15 seconds.
So, this can induct broadcast storms in larger network without any other design problem.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 

Author Comment

by:MarktheNerd
ID: 40453300
I think the STP thing is probably on the right path. I haven't been able to figure out how to do portfast (Portfast is Cisco, this is HP, so I'm trying to find the equivalent), but if I disable STP on a given switch, the broadcasts stop immediately. I'll see if I can figure out the specific settings to keep it from happening now.
0
 
LVL 32

Accepted Solution

by:
Predrag earned 2000 total points
ID: 40453313
HP paralel to portfast is edge-port, command is
Switch(config)#spanning-tree [portlist] edge-port
0
 

Author Comment

by:MarktheNerd
ID: 40453861
It's still being a bit odd, but at least we know the root cause now. Disabling STP is the Band-Aid we need until we can figure out the specific STP configuration we need. Thanks, Predrag!!!
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This month, Experts Exchange’s free Course of the Month is focused on CompTIA IT Fundamentals.
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question