Spanning tree error

[sadovskyi]

Hi all!

Another question on work of STP.

I have a switch (EdgeCore) connected to Cisco Nexus 5548's eth 1/1 and BDCom OLT connected to eth 1/2. From edgeCore's interface goes several VLANs to BDCom. One VLAN works well, the second does not. Can somebody help with this?

Ports config 

interface Ethernet1/1
description aaa
no cdp enable
switchport mode trunk
switchport trunk allowed vlan 130,138, (+ other)
speed 1000
duplex full
no shutdown

interface Ethernet1/2
description bbb
no cdp enable
switchport mode trunk
switchport trunk allowed vlan 130,138,(+ other)
no shutdown

This is what STP says:

show spanning-tree vlan 130 detail

VLAN0130 is executing the rstp compatible Spanning Tree protocol
Bridge Identifier has priority 32768, sysid 130, address 547f.eea3.f441
Configured hello time 2, max age 20, forward delay 15
We are the root of the spanning tree
Topology change flag not set, detected flag not set
Number of topology changes 5 last change occurred 18:07:53 ago
from Ethernet1/1
Times: hold 1, topology change 35, notification 2
hello 2, max age 20, forward delay 15
Timers: hello 0, topology change 0, notification 0

Port 129 (Ethernet1/1) of VLAN0130 is designated forwarding
Port path cost 4, Port priority 128, Port Identifier 128.129
Designated root has priority 32898, address 547f.eea3.f441
Designated bridge has priority 32898, address 547f.eea3.f441
Designated port id is 128.129, designated path cost 0
Timers: message age 0, forward delay 0, hold 0
Number of transitions to forwarding state: 1
Link type is point-to-point by default
BPDU: sent 32652, received 0

show spanning-tree vlan 138 detail

VLAN0138 is executing the rstp compatible Spanning Tree protocol
Bridge Identifier has priority 32768, sysid 138, address 547f.eea3.f441
Configured hello time 2, max age 20, forward delay 15
We are the root of the spanning tree
Topology change flag not set, detected flag not set
Number of topology changes 3 last change occurred 26:42:40 ago
from Ethernet1/2
Times: hold 1, topology change 35, notification 2
hello 2, max age 20, forward delay 15
Timers: hello 0, topology change 0, notification 0

Port 129 (Ethernet1/1) of VLAN0138 is broken (Port VLAN ID Mismatch)
Port path cost 4, Port priority 128, Port Identifier 128.129
Designated root has priority 32906, address 547f.eea3.f441
Designated bridge has priority 32906, address 547f.eea3.f441
Designated port id is 128.129, designated path cost 0
Timers: message age 0, forward delay 13, hold 0
Number of transitions to forwarding state: 0
Link type is point-to-point by default
BPDU: sent 32659, received 0

What can be the problem?

[marce1000]

 - As spanning tree algorithms can be chosen per vlan , is there a common STP setup  for this vlan and the foreign equipment too ?

 M.

[sadovskyi]

show spanning-tree detail

Global MSTP is disabled

show spanning-tree interface ethernet 1/0/24

Global MSTP is disabled

[MHM Cisco World]

The cisco SW include nexus use non IEEE stp (rapid pvst and pvst) other vendor not use these non IEEE stp so in your case you need to use 

MST in both side' MST is standard IEEE stp which can use by cisco and other vendor.

MHM

[sadovskyi]

Thank you for advice! If STP is disabled on the initial switch, maybe I can disable it on Cisco Nexus port? How can I do this? I found only how to choose between 3 modes: edge, network and normal. Normal is used as default. Or how to configure MST to work with switches where STP is disabled?

[MHM Cisco World]

If other vendor disable STP then you can in NSK disable stp per interface via bpdu filter.

Note:- bpdu filter can make loop if there are more than one link between NSK and other SW.

Note:-add bpduguard for more secure from l2 loop

MHM

[sadovskyi]

There is only one link between 2 switches.

(config-if)# spanning-tree bpduguard enable

(config-if)# spanning-tree bpdufilter disable

Like this? Or vice versa? Usually I see bpdufilter enabled on other switches... Sorry for stupid question.

[MHM Cisco World · Accepted solution]

(config-if)# spanning-tree bpduguard enable

(config-if)# spanning-tree bpdufilter enable  <- this make sure your Port not send bpdu i.e. stp is disable 

Friend usually we never disable stp except case interconnect two DataCenter so be careful read more about this command and make double check how many link and if other SW complete disable STP

Goodluck 

MHM

[sadovskyi]

Thank you all for help! All is working now.