7200emu.hacki.at

hacki · Posted: Sat Feb 03, 2007 4:19 pm Post subject:

hi,

nice drawing ...

.. but who pings ?

show spanning-tree output please

h.

ccie14745 · Joined: 04 Jan 2007 Posts: 447 Location: Dallas, TX

Are all these running VTP server? If not, do all four switches have VLANs 10 & 20?

--
Justin White
CCIE #14745

gotolab · Joined: 05 Sep 2006 Posts: 30

STP & VTP are ok, i had try several IOS to do that

-- ----------------------
Horace.ma
CCIE #11190 (RS&Security)

hacki · Posted: Sun Feb 04, 2007 9:50 am Post subject:

more output please ...

h.

gotolab · Joined: 05 Sep 2006 Posts: 30

SW3#show spanning-tree vlan 10

VLAN10 is executing the ieee compatible Spanning Tree protocol
Bridge Identifier has priority 32768, address c202.0888.0001
Configured hello time 2, max age 20, forward delay 15
Current root has priority 8192, address c200.0888.0001
Root port is 42 (FastEthernet1/1), cost of root path is 19
Topology change flag not set, detected flag not set
Number of topology changes 0 last change occurred 00:02:00 ago
Times: hold 1, topology change 35, notification 2
hello 2, max age 20, forward delay 15
Timers: hello 0, topology change 0, notification 0, aging 300

Port 42 (FastEthernet1/1) of VLAN10 is forwarding
Port path cost 19, Port priority 128, Port Identifier 128.42.
Designated root has priority 8192, address c200.0888.0001
Designated bridge has priority 8192, address c200.0888.0001
Designated port id is 128.44, designated path cost 0
Timers: message age 2, forward delay 0, hold 0
Number of transitions to forwarding state: 1
BPDU: sent 1, received 60

Port 43 (FastEthernet1/2) of VLAN10 is blocking Port path cost 19, Port priority 128, Port Identifier 128.43.
Designated root has priority 8192, address c200.0888.0001
Designated bridge has priority 8192, address c201.0888.0001
Designated port id is 128.44, designated path cost 19
Timers: message age 4, forward delay 0, hold 0
Number of transitions to forwarding state: 0
BPDU: sent 0, received 59

SW3#show spanning-tree vlan 20

VLAN20 is executing the ieee compatible Spanning Tree protocol
Bridge Identifier has priority 32768, address c202.0888.000b
Configured hello time 2, max age 20, forward delay 15
Current root has priority 8192, address c201.0888.000b
Root port is 43 (FastEthernet1/2), cost of root path is 19
Topology change flag not set, detected flag not set
Number of topology changes 0 last change occurred 00:02:46 ago
Times: hold 1, topology change 35, notification 2
hello 2, max age 20, forward delay 15
Timers: hello 0, topology change 0, notification 0, aging 300

Port 42 (FastEthernet1/1) of VLAN20 is blocking
Port path cost 19, Port priority 128, Port Identifier 128.42.
Designated root has priority 8192, address c201.0888.000b
Designated bridge has priority 32768, address c200.0888.000b
Designated port id is 128.44, designated path cost 19
Timers: message age 3, forward delay 0, hold 0
Number of transitions to forwarding state: 0
BPDU: sent 1, received 84

Port 43 (FastEthernet1/2) of VLAN20 is forwarding
Port path cost 19, Port priority 128, Port Identifier 128.43.
Designated root has priority 8192, address c201.0888.000b
Designated bridge has priority 8192, address c201.0888.000b
Designated port id is 128.44, designated path cost 0
Timers: message age 2, forward delay 0, hold 0
Number of transitions to forwarding state: 1
BPDU: sent 0, received 83

SW3# ping 10.1.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 16/65/200 ms
SW3# ping 10.1.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 28/55/92 ms
SW3#ping 20.1.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 20.1.1.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
SW3#ping 20.1.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 20.1.1.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

SW3#show mac-address-table
Destination Address Address Type VLAN Destination Port
------------------- ------------ ---- --------------------
c202.0888.0000 Self 1 Vlan1
c202.0888.0000 Self 10 Vlan10
c202.0888.0000 Self 20 Vlan20
c200.0888.0000 Dynamic 10 FastEthernet1/1
c203.0888.0000 Dynamic 10 FastEthernet1/1

SW3#show arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 10.1.1.1 1 c200.0888.0000 ARPA Vlan10
Internet 10.1.1.2 1 c201.0888.0000 ARPA Vlan10
Internet 10.1.1.3 - c202.0888.0000 ARPA Vlan10
Internet 10.1.1.4 0 c203.0888.0000 ARPA Vlan10
Internet 20.1.1.3 - c202.0888.0000 ARPA Vlan20

SW3 no any MAC-address of VLAN 20

hacki · Posted: Sun Feb 04, 2007 1:47 pm Post subject:

spanning tree of SW3 looks good - could you also post switch one and two. and also a show interface vlan 20 of switch three.

thanks.

h.

chris · Site Admin Joined: 17 Jul 2006 Posts: 468

Interesting bug report, it could be related to the SVI problems that some people are seeing. I'll test a similar configuration. BTW, the CAM is flushed very often (5 seconds), this isn't the standard software + hardware behavior.

gotolab · Joined: 05 Sep 2006 Posts: 30

right, STP look like OK. but i have try several ways for test, the problem is real exist

chris · Site Admin Joined: 17 Jul 2006 Posts: 468

Is it possible to have your .net file ? I would to reproduce your topology exactly and there are no indications about ports used on SW2.

chris · Site Admin Joined: 17 Jul 2006 Posts: 468

I can reproduce this problem. Here is what I get:

SW1#sh spa vlan 20 br
FastEthernet1/1 128.42 128 19 FWD 0 8192 cc01.229d.0002 128.42
FastEthernet1/3 128.44 128 19 FWD 19 32768 cc00.229d.0002 128.44
FastEthernet1/4 128.45 128 19 FWD 19 32768 cc00.229d.0002 128.45

SW2#sh spa vlan 20 br
FastEthernet1/1 128.42 128 19 FWD 0 8192 cc01.229d.0002 128.42
FastEthernet1/3 128.44 128 19 FWD 0 8192 cc01.229d.0002 128.44
FastEthernet1/4 128.45 128 19 FWD 0 8192 cc01.229d.0002 128.45

SW3#sh spa vlan 20 br
FastEthernet1/1 128.42 128 19 BLK 19 32768 cc00.229d.0002 128.44
FastEthernet1/2 128.43 128 19 FWD 0 8192 cc01.229d.0002 128.45

SW4#sh spa vlan 20 br
FastEthernet1/1 128.42 128 19 BLK 19 32768 cc00.229d.0002 128.45
FastEthernet1/2 128.43 128 19 FWD 0 8192 cc01.229d.0002 128.44

(Fa1/2 is the uplink to SW2 for SW3 and SW4, so the traffic should pass).

I'll check my code...

ccie14745 · Joined: 04 Jan 2007 Posts: 447 Location: Dallas, TX

Yeah, I put together this scenario and the behavior certainly is weird...basically SW1 can act as the primary root, but not SW2...unless SW1 is stopped and then everything is working.

Actually, it sure seems like frames flow from SW3 and SW4 to SW2, but not the other way around. It also doesn't appears to be an STP issue, since the Fa1/2 ports are correctly in FWD for Vl20 on both SW3 and SW4.

Here's a .NET file and diagram for everyone to try this out...very weird...

The attachment includes a file to load the VLAN database after the fact, as well as a couple of TCL scripts to test the connectivity for both VLAN 10 and 20.

chris · Site Admin Joined: 17 Jul 2006 Posts: 468

In fact, there is a DISCARD flag in the switch for each port. It is set for the uplink directed to SW2 and my code drops the frames. Maybe this needs only to be tested for the native VLAN, I don't know. I will add a workaround for that.

gotolab · Joined: 05 Sep 2006 Posts: 30

thank for chris. i find more detail about this :

1、MAC-address-table is flushed very often in despite of configuration
2、when shutdown SW1's Fa1/1, the SW2's Fa1/1 still up (different with real equipment)

chris · Site Admin Joined: 17 Jul 2006 Posts: 468

Ok, the spanning-tree bug is fixed. I check with different configurations, the discard flag only applies for native traffic, and not for 802.1q packets.