根警卫阻塞端口

[xiaojiang]

核心上面会有显示接口堵塞的情况显示：

Jun 28 23:49:17.147: %SPANTREE-2-ROOTGUARD_BLOCK: Root guard blocking port GigabitEthernet6/3 on VLAN0050.
Jun 29 02:19:03.252: %SPANTREE-2-ROOTGUARD_BLOCK: Root guard blocking port GigabitEthernet6/3 on VLAN0050.
Jun 29 05:25:01.377: %SPANTREE-2-ROOTGUARD_BLOCK: Root guard blocking port GigabitEthernet6/3 on VLAN0050.
Jun 29 07:48:38.317: %SPANTREE-2-ROOTGUARD_BLOCK: Root guard blocking port GigabitEthernet6/3 on VLAN0050.
Jun 29 07:59:07.059: %SPANTREE-2-ROOTGUARD_BLOCK: Root guard blocking port GigabitEthernet6/3 on VLAN0050.
Jun 29 08:03:53.336: %SPANTREE-2-ROOTGUARD_BLOCK: Root guard blocking port GigabitEthernet6/3 on VLAN0050.
Jun 29 08:24:12.061: %SPANTREE-2-ROOTGUARD_BLOCK: Root guard blocking port GigabitEthernet6/3 on VLAN0050.

然后这个连接6/3的交换机目前密码是登不上去。

下游交换机都会有这种接口一断一开的显示

Jun 28 18:56:51.964: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/2, changed state to up

Jun 28 21:31:04.538: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/8, changed state to down

Jun 28 21:31:05.545: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/8, changed state to down

Jun 28 21:31:15.171: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/7, changed state to down

Jun 28 21:31:16.178: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/7, changed state to down

Jun 29 07:42:30.685: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/8, changed state to up

Jun 29 07:42:32.085: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/8, changed state to up

Jun 29 07:42:51.175: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/8, changed state to down

Jun 29 07:42:53.183: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/8, changed state to up

Jun 29 08:58:15.055: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/7, changed state to up

Jun 29 08:58:16.056: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/7, changed state to up

想问一下这个是内部环路还是说有其它问题，该怎么解决

[Rps-Cheers]

当开启了Root guard的端口对方如果要成为根交换机，则会有如下提示，并且接口被放入inconsistent (blocked) 状态：

%SPANTREE-2-ROOTGUARD_BLOCK: Root guard blocking port GigabitEthernetx/x on VLAN000x

可以使用命令：sh spanning-tree inconsistentports 看看放入inconsistent (blocked) 状态的端口。

对端的SW是不是在VLAN50具有更高的优先级或其他更优于本SW的参数，使得对方交换机想要成为根交换机，而本端交换机应该是配置了根防护，从而将对应端口block。可以确保一下，该SW有没有如下配置，让该SW在对应VLAN作为Root

“spanning-tree vlan <vlan-id> root”  

或者保证该SW的优先级等内容高于对方SW。希望可以有用。