Solved: Unifi to cisco bpdu

isakdal · ‎11-15-2023

I've been recently testing out 802.1x on our UniFi switches here at work, and i was wondering if anyone has any advice as to my current issue.

I've been trying to see if 802.1x will work across a cisco switch.

Currently i have 802.1x setup on a UniFi switch that is connected to an access port on my cisco(2960s).

All the ports on the cisco are set to the same vlan, 1190 in this case, ive also connected a comuter to the other end which should end up in that 1190vlan. The UniFi port sends out a BPDU packet which sends the access port into err-disabled, unless bpduguard is disabled (From my understanding). I have disabled BPDU guard yet i've not got it to work, does anyone have any expeience with this or any advice that i could use to hopefully understand how to get it to work, or why this quite frankly wont work.

interface GigabitEthernet1/0/47
switchport access vlan 1190
switchport mode access
spanning-tree portfast
spanning-tree bpduguard disable
!
interface GigabitEthernet1/0/48
switchport access vlan 1190
switchport mode access
spanning-tree portfast
spanning-tree bpduguard disable

marce1000 · ‎11-15-2023

- I think you have 'collisional interests' if you want to connect a switch (Unifi) or not to another in access mode ,this kind of bdpu event is then considered 'natural' , if you want 802.1x , then have the Unifi do that to parenting equipment directly ,

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

View solution in original post

marce1000 · ‎11-15-2023

- I think you have 'collisional interests' if you want to connect a switch (Unifi) or not to another in access mode ,this kind of bdpu event is then considered 'natural' , if you want 802.1x , then have the Unifi do that to parenting equipment directly ,

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

isakdal · ‎11-16-2023

Right so there's no possible way to get the cisco switch to let the traffic through? (Unless it's a trunk port ofc) while in access mode?

marce1000 · ‎11-16-2023

- Not in access mode (indeed) ,

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

isakdal · ‎11-16-2023

Is there a particular reason as to why it quite simply doesn't work? like a "Professional" way that i could use to help further my understanding?

MHM Cisco World · ‎11-15-2023

In cisco SW do get log that the port is errdisable because of loopback??

MHM Cisco World · ‎11-16-2023

you connect to interface to unifi SW and if STP is not work then
show spanning tree will show that both port are FWD
and this make each one detect it little loopback frame and hence both port go to err-disable.