topic RE: Spanguard not working in ExtremeSwitching (Other)

Spanguard not working

eminsesen — Thu, 14 Apr 2016 11:58:00 GMT

Hi,
We are using Extreme and Enterasys product in my foundation.
Even though I configured spanguard on Enterasys B5 and B3, Spanguard didn't work.
I configured span guard on my switch as follows:

set spantree adminedge ge.1.1-23 true
set spantree spanguardtrapenable enable
set spantree spanguard enable

I'm waiting for your help.
Thanks.

RE: Spanguard not working

jeronimo — Thu, 14 Apr 2016 13:24:00 GMT

Please define "didn't work" 🙂

RE: Spanguard not working

Jason_Parker — Thu, 14 Apr 2016 16:20:00 GMT

Please take a look at a video on you tube that goes through the steps including displaying the traps and disabling the port Search wordS Enterasys Networks spanguard Jason Parker

RE: Spanguard not working

eminsesen — Thu, 14 Apr 2016 16:20:00 GMT

Thanks.
I have adjusted the settings of spanguard by your video.
But spanguard doesn't function. Namely Ports doesn't lock.

RE: Spanguard not working

jeronimo — Thu, 14 Apr 2016 16:20:00 GMT

So you are connecting another switch with STP enabled to a SpanGuard-enabled port and the port does NOT lock?

RE: Spanguard not working

eminsesen — Thu, 14 Apr 2016 16:20:00 GMT

Yes, RSTP and Spanguard enabled.

RE: Spanguard not working

jeronimo — Thu, 14 Apr 2016 16:20:00 GMT

You're still not clear! Is STP enabled on the remote switch on the port that you connect to the local switch that has Spanguard enabled? If STP is not enabled remotely, that is, not sending BPDUs, Spanguard will not lock the port.

RE: Spanguard not working

Christopher_Dav — Thu, 14 Apr 2016 16:20:00 GMT

^This is likely you're issue. Jeronimo beat me to it. What model switch are you plugging into ports 1-23 that isn't being blocked? Best of luck.

RE: Spanguard not working

eminsesen — Thu, 14 Apr 2016 16:20:00 GMT

Remote Switch is unmanagement(TP-Link SL1226). I don't know whether STP is enable or disable on remote switch.
Remote switch connect to ge.1.1 on Enterasys B5.
ge.1.24 is UpLink on Enterasys B5

Enterasys B5G124-24
Firmware 06.81.02.0007
Remote Switch TP-SL1226(unmanagement)
Configuration file (Enterasys B5)

Configuration All
https://drive.google.com/open?id=0B7zcYMGkKWgKNmhVX0taR2xpUjA

Configuration Summary
https://drive.google.com/open?id=0B7zcYMGkKWgKMkMzZGdGRUR2VFE

RE: Spanguard not working

jeronimo — Thu, 14 Apr 2016 16:20:00 GMT

Unmanaged devices like that for 100 bucks don't do spanning tree. Therefore you can't detect one of those devices using Spanguard.

-- EDIT --

Let me clarify:

From what we see your TPLink does not run STP. If it would, then the B5 would block the port. Now if your TPLink supports forwarding of multicasts, which it probably does, and since BPDUs are nothing but L2 multicasts, Spanguard will only kick in once you actually create a loop, that is, connect a second port from the B5 to the TPLink. The B5 will see its own BPDUs and block one of the two ports.

As long as there is no loop, Spanguard will not trigger since the TPLink does not actively participate in STP, so the port connected to the B5 can be considered as a shared-media port.

You should also be very careful with loops on the unmanaged switches themselves or in case you are planning to add more than one of these unmanaged switches to your network and interconnect them.

RE: Spanguard not working

Jason_Parker — Thu, 14 Apr 2016 16:24:00 GMT

https://youtu.be/euUa_5Rv-Uc Jason

RE: Spanguard not working

Mike_D — Fri, 15 Apr 2016 19:09:00 GMT

eminsesen,

firmware, hardware vintage, port types and specific test cases aside - spanguard works on the Securestack.

Can you use the B3 as a test case for the B5 in spanguard mode? We're missing a puzzle piece somewhere...

regards,
Mike