erridisable on remote switch port, I think a switch is connected to the other side

[suisse]

I have a ticket for a remote site switch that looks like it has had changes made to it that aren't clear.

I have a port that is in a errdisable state due to BPDU guard.  The switchport is in access mode and it has portfast enabled.   As soon as the autorecovery retries it instantly goes back into into errdisabled so in my mind there is a network appliance on the other side of this port.

Is there any danger in disabling the portfast feature before being able to visit this site in person or get eyes on it?  What would you do to troubleshoot this?

[Maarten Brok]

I also do think you hit the BPDUGuard functionality. You say you can confirm the interface on your side is in errdisable state?

Please look into the logging of your switch:
show log

and see what caused this issue, spanning-tree portfast will not be the cause, as it skips the first steps of the spanning-tree protocol.

If the BPDUGuard is the cause, either unplug that cable or delete the 'spanning-tree bpduguard enable' command from the interface and 'shutdown' / 'no shutdown' the interface to clear the errdisable state.

[suisse]

Yes sir, the switch I can access remotely has a particular switchport in an errdisable state.  When the recovery timer hits 0 and it attempts to recover, the int status of that port briefly shows 'not connected' followed by going right back to errdisabled.

error disable reason = bpduguard

the switchport has this command pertaining to spanning-tree

spanning-tree portfast edge for the switchport

It also has these global commands:

spanning-tree portfast edge bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
errdisable recovery cause bpduguard

[paul driver]

Hello

I would say bpduguard is doing its job, As such I would admin down that port and wait for the offender to complain as possibly it will be some user being a bit naughty and trying to extended their network port access.

Lastly I would recommend disabling error recovery for bpduguard as you would like to know the cause of the problem is ,But you have recovery enabled then this problem could just relocate to another access-port

res

Paul