Spanguard not working

  • 0
  • 1
  • Problem
  • Updated 2 years ago
  • Solved
Hi,
We are using Extreme and Enterasys product in my foundation.
Even though I configured spanguard on Enterasys B5 and B3, Spanguard didn't work.
I configured span guard on my switch as follows:

set spantree adminedge ge.1.1-23 true
set spantree spanguardtrapenable enable
set spantree spanguard enable


I'm waiting for your help.
Thanks.
Photo of eminsesen

eminsesen

  • 120 Points 100 badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of jeronimo

jeronimo

  • 1,198 Points 1k badge 2x thumb
Please define "didn't work" :)
Photo of Jason Parker

Jason Parker, Employee

  • 2,918 Points 2k badge 2x thumb
Please take a look at a video on you tube that goes through the steps including displaying the traps and disabling the port
Search wordS
Enterasys Networks spanguard Jason Parker
Photo of eminsesen

eminsesen

  • 120 Points 100 badge 2x thumb
Yes, RSTP and Spanguard enabled.
Photo of jeronimo

jeronimo

  • 1,198 Points 1k badge 2x thumb
You're still not clear! Is STP enabled on the remote switch on the port that you connect to the local switch that has Spanguard enabled? If STP is not enabled remotely, that is, not sending BPDUs, Spanguard will not lock the port.
Photo of Christopher Davis

Christopher Davis

  • 366 Points 250 badge 2x thumb
^This is likely you're issue. Jeronimo beat me to it. What model switch are you plugging into ports 1-23 that isn't being blocked? Best of luck. 
Photo of eminsesen

eminsesen

  • 120 Points 100 badge 2x thumb
Remote Switch is unmanagement(TP-Link SL1226). I don't know whether STP is enable or disable on remote switch.
Remote switch connect to ge.1.1 on Enterasys B5.
ge.1.24 is UpLink on Enterasys B5


Enterasys B5G124-24
Firmware  06.81.02.0007
Remote Switch TP-SL1226(unmanagement)
Configuration file (Enterasys B5)

Configuration All
https://drive.google.com/open?id=0B7zcYMGkKWgKNmhVX0taR2xpUjA

Configuration Summary
https://drive.google.com/open?id=0B7zcYMGkKWgKMkMzZGdGRUR2VFE
Photo of jeronimo

jeronimo

  • 1,198 Points 1k badge 2x thumb
Unmanaged devices like that for 100 bucks don't do spanning tree. Therefore you can't detect one of those devices using Spanguard.

-- EDIT --

Let me clarify:

From what we see your TPLink does not run STP. If it would, then the B5 would block the port. Now if your TPLink supports forwarding of multicasts, which it probably does, and since BPDUs are nothing but L2 multicasts, Spanguard will only kick in once you actually create a loop, that is, connect a second port from the B5 to the TPLink. The B5 will see its own BPDUs and block one of the two ports.

As long as there is no loop, Spanguard will not trigger since the TPLink does not actively participate in STP, so the port connected to the B5 can be considered as a shared-media port.

You should also be very careful with loops on the unmanaged switches themselves or in case you are planning to add more than one of these unmanaged switches to your network and interconnect them.
(Edited)
Photo of Jason Parker

Jason Parker, Employee

  • 2,918 Points 2k badge 2x thumb
Photo of Mike D

Mike D, Alum

  • 3,852 Points 3k badge 2x thumb
eminsesen, 


firmware, hardware vintage, port types and specific test cases aside - spanguard works on the Securestack.  

Can you use the B3 as a test case for the B5 in spanguard mode?  We're missing a puzzle piece somewhere...

regards,
Mike