cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
397
Views
0
Helpful
2
Replies

New Port Channel set up getting bpduguard err-disable

elane
Level 1
Level 1

I'm attempting to set up a mew port-channel and it keeps going err-disable on switch side. 3850 log below and the config on 7009 side and 3850. Keep looking at this and seeing what i may be missing here...

Nexus 7009 configured ports 3/12 and 3/10. The 3850 side is T1/1/3 and T2/1/3

Log from 3850

005793: *Dec 5 09:13:07.223 EST: %LINK-3-UPDOWN: Interface TenGigabitEthernet1/1/3, changed state to up
005794: *Dec 5 09:13:07.602 EST: %SPANTREE-2-BLOCK_BPDUGUARD: Received BPDU on port Port-channel1 with BPDU Guard enabled. Disabling port.
005795: *Dec 5 09:13:07.603 EST: %PM-4-ERR_DISABLE: bpduguard error detected on Po1, putting Te1/1/3 in err-disable state
005796: *Dec 5 09:13:07.658 EST: %PM-4-ERR_DISABLE: bpduguard error detected on Po1, putting Te2/1/3 in err-disable state
005797: *Dec 5 09:13:07.660 EST: %PM-4-ERR_DISABLE: bpduguard error detected on Po1, putting Po1 in err-disable state
005798: *Dec 5 09:13:09.657 EST: %LINK-3-UPDOWN: Interface TenGigabitEthernet1/1/3, changed state to down

Set up below for the 7009 and the 3850's

********************** ACS CONFIG 95A ****************

c7009-c02a-picnj-95a-hut-0101-1# sho port-channel summary
Flags: D - Down P - Up in port-channel (members)
I - Individual H - Hot-standby (LACP only)
s - Suspended r - Module-removed
b - BFD Session Wait
S - Switched R - Routed
U - Up (port-channel)
M - Not in use. Min-links not met
--------------------------------------------------------------------------------
Group Port- Type Protocol Member Ports
Channel
--------------------------------------------------------------------------------
102 Po102(SD) Eth LACP Eth3/10(D) Eth3/12(D)

interface Ethernet3/10
switchport mode trunk
switchport trunk native vlan 1001
switchport trunk allowed vlan 2-999,1200-4093
spanning-tree port type normal
spanning-tree guard root
spanning-tree mst 0-2,15 cost 17500
logging event port link-status
logging event port trunk-status
storm-control broadcast level 1.00
storm-control multicast level 1.00
udld aggressive
channel-group 102 mode active

interface Ethernet3/12
switchport mode trunk
switchport trunk native vlan 1001
switchport trunk allowed vlan 2-999,1200-4093
spanning-tree port type normal
spanning-tree guard root
spanning-tree mst 0-2,15 cost 17500
logging event port link-status
logging event port trunk-status
storm-control broadcast level 1.00
storm-control multicast level 1.00
udld aggressive
channel-group 102 mode active

***** 3850 95 VMOD Switch Stack *************

Show run int Po1:
interface Port-channel1
description Channel group 1
switchport trunk native vlan 1001
switchport trunk allowed vlan 2-999,1200-4093
switchport mode trunk
ip arp inspection trust
spanning-tree portfast trunk
ip dhcp snooping trust

interface Te1/1/3
switchport mode trunk
switchport trunk allowed vlan 2-999,1200-4093
switchport trunk native vlan 1001
switchport nonegotiate
span mst 0-2,15 cost 17500
ip dhcp snooping trust
ip arp inspection trust
channel-group 1 mode active

interface Te2/1/3
switchport mode trunk
switchport trunk allowed vlan 2-999,1200-4093
switchport trunk native vlan 1001
switchport nonegotiate
span mst 0-2,15 cost 17500
ip dhcp snooping trust
ip arp inspection trust
channel-group 1 mode active

 

1 Accepted Solution

Accepted Solutions

Two issue here 

1- remove portfast from trunk' portfast can not config between SW

2- what is the mode of STP in 3850

MHM

View solution in original post

2 Replies 2

Two issue here 

1- remove portfast from trunk' portfast can not config between SW

2- what is the mode of STP in 3850

MHM

balaji.bandi
Hall of Fame
Hall of Fame

we have seen this before  - Try to remove below configuration from Port-channel and shut and no-shut the port-channel start with.

storm-control broadcast level 1.00
storm-control multicast level 1.00

Other suggestion -

1. Make sure all the VLAN in place and configured

2. Disable PortFast and BPDUGuard

check STP BPDU :

https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10588-74.html

3. when you connection tengig to ethernet - try speed no negotiate option.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Review Cisco Networking for a $25 gift card