×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Jobs

Issues with MSTP on HP Procurves

Issues with MSTP on HP Procurves

Issues with MSTP on HP Procurves

(OP)
Hi there,

We're experiencing some network anomalies with our current HP Procurve switches...

We've got a Core/Distribution layout, which uses a pair of HP 2910al-24G at the core, with a Trunk pair of 1Gb Ethernet between them.
The relevant spanning-tree config looks like:
SWITCH01:

CODE -->

SWITHC01# show spanning-tree config Multiple Spanning Tree (MST) Configuration Information STP Enabled [No] : Yes Force Version [MSTP-operation] : MSTP-operation Default Path Costs [802.1t] : 802.1t MST Configuration Name : 002347c7b4c0 MST Configuration Revision : 0 Switch Priority : 36864 Forward Delay [15] : 15 Hello Time [2] : 2 Max Age [20] : 20 Max Hops [20] : 20 | Path Prio Admin Auto Admin Hello Root TCN BPDU Port Type | Cost rity Edge Edge PtP Time Guard Guard Flt ----- --------- + --------- ----- ----- ----- ----- ------ ------ ------ ---- 3 100/1000T | Auto 128 No Yes True Global No No No 4 100/1000T | Auto 128 No Yes True Global No No No 5 100/1000T | Auto 128 No Yes True Global No No No 6 100/1000T | Auto 128 No Yes True Global No No No 7 100/1000T | Auto 128 No Yes True Global No No No 8 100/1000T | Auto 128 No Yes True Global No No No 9 100/1000T | Auto 128 No Yes True Global No No No 10 100/1000T | Auto 128 No Yes True Global No No No 11 100/1000T | Auto 128 No Yes True Global No No No 12 100/1000T | Auto 128 No Yes True Global No No No 13 100/1000T | Auto 128 No Yes True Global No No No 14 100/1000T | Auto 128 No Yes True Global No No No 15 100/1000T | Auto 128 No Yes True Global No No No 16 100/1000T | Auto 128 No Yes True Global No No No 17 100/1000T | Auto 128 No Yes True Global No No No 18 100/1000T | Auto 128 No Yes True Global No No No 19 100/1000T | Auto 128 No Yes True Global No No No 20 100/1000T | Auto 128 No Yes True Global No No No 21 100/1000T | Auto 128 No Yes True Global No No No 22 100/1000T | Auto 128 No Yes True Global No No No 23 100/1000T | Auto 128 No Yes True Global No No No 24 100/1000T | Auto 128 No Yes True Global No No No Trk1 | Auto 64 No Yes True Global No No No SWITCH01# show spanning-tree Multiple Spanning Tree (MST) Information STP Enabled : Yes Force Version : MSTP-operation IST Mapped VLANs : 1-4094 Switch MAC Address : 002347-c7b4c0 Switch Priority : 36864 Max Age : 20 Max Hops : 20 Forward Delay : 15 Topology Change Count : 97,622 Time Since Last Change : 1 secs CST Root MAC Address : 002334-e10c00 CST Root Priority : 0 CST Root Path Cost : 200000 CST Root Port : 23 IST Regional Root MAC Address : 002347-c7b4c0 IST Regional Root Priority : 36864 IST Regional Root Path Cost : 0 IST Remaining Hops : 20 Root Guard Ports : TCN Guard Ports : BPDU Protected Ports : BPDU Filtered Ports : PVST Protected Ports : PVST Filtered Ports : | Prio | Designated Hello Port Type | Cost rity State | Bridge Time PtP Edge ----- --------- + --------- ----- ---------- + ------------- ----- --- ---- 3 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 4 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 5 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 6 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 7 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 8 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 9 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 10 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 11 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 12 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 13 100/1000T | 2000000 128 Forwarding | 002347-c7b4c0 2 Yes No 14 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 15 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes Yes 16 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes Yes 17 100/1000T | Auto 128 Disabled | 18 100/1000T | Auto 128 Disabled | 19 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes Yes 20 100/1000T | Auto 128 Disabled | 21 100/1000T | Auto 128 Disabled | 22 100/1000T | Auto 128 Disabled | 23 100/1000T | 200000 128 Forwarding | 0023ab-dc0880 2 Yes No 24 100/1000T | 200000 128 Blocking | 0023ab-dc0880 2 Yes No Trk1 | 20000 64 Forwarding | 002347-c7b4c0 2 Yes No SWITCH01# show spanning-tree instance ist IST Instance Information Instance ID : 0 Mapped VLANs : 1-4094 Switch Priority : 36864 Topology Change Count : 99,013 Time Since Last Change : 3 secs Regional Root MAC Address : 002347-c7b4c0 Regional Root Priority : 36864 Regional Root Path Cost : 0 Regional Root Port : This switch is root Remaining Hops : 20 Designated Port Type Cost Priority Role State Bridge ----- --------- --------- -------- ---------- ---------- ------------- 3 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 4 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 5 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 6 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 7 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 8 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 9 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 10 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 11 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 12 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 13 100/1000T 2000000 128 Designated Forwarding 002347-c7b4c0 14 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 15 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 16 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 17 100/1000T Auto 128 Disabled Disabled 18 100/1000T Auto 128 Disabled Disabled 19 100/1000T 20000 128 Designated Forwarding 002347-c7b4c0 20 100/1000T Auto 128 Disabled Disabled 21 100/1000T Auto 128 Disabled Disabled 22 100/1000T Auto 128 Disabled Disabled 23 100/1000T 200000 128 Root Forwarding 0023ab-dc0880 24 100/1000T 200000 128 Alternate Blocking 0023ab-dc0880 Trk1 20000 64 Designated Forwarding 002347-c7b4c0

SWITHC02:

CODE

SWITCH02# show spanning-tree config Multiple Spanning Tree (MST) Configuration Information STP Enabled [No] : Yes Force Version [MSTP-operation] : MSTP-operation Default Path Costs [802.1t] : 802.1t MST Configuration Name : 002347cb1380 MST Configuration Revision : 0 Switch Priority : 40960 Forward Delay [15] : 15 Hello Time [2] : 2 Max Age [20] : 20 Max Hops [20] : 20 | Path Prio Admin Auto Admin Hello Root TCN BPDU Port Type | Cost rity Edge Edge PtP Time Guard Guard Flt ----- --------- + --------- ----- ----- ----- ----- ------ ------ ------ ---- 3 100/1000T | Auto 128 No Yes True Global No No No 4 100/1000T | Auto 128 No Yes True Global No No No 5 100/1000T | Auto 128 No Yes True Global No No No 6 100/1000T | Auto 128 No Yes True Global No No No 7 100/1000T | Auto 128 No Yes True Global No No No 8 100/1000T | Auto 128 No Yes True Global No No No 9 100/1000T | Auto 128 No Yes True Global No No No 10 100/1000T | Auto 128 No Yes True Global No No No 11 100/1000T | Auto 128 No Yes True Global No No No 12 100/1000T | Auto 128 No Yes True Global No No No 13 100/1000T | Auto 128 No Yes True Global No No No 14 100/1000T | Auto 128 No Yes True Global No No No 15 100/1000T | Auto 128 No Yes True Global No No No 16 100/1000T | Auto 128 No Yes True Global No No No 17 100/1000T | Auto 128 No Yes True Global No No No 18 100/1000T | Auto 128 No Yes True Global No No No 19 100/1000T | Auto 128 No Yes True Global No No No 20 100/1000T | Auto 128 No Yes True Global No No No 21 100/1000T | Auto 128 No Yes True Global No No No 22 100/1000T | Auto 128 No Yes True Global No No No 23 100/1000T | Auto 128 No Yes True Global No No No 24 100/1000T | Auto 128 No Yes True Global No No No Trk1 | Auto 64 No Yes True Global No No No SWITHC02# show spanning-tree Multiple Spanning Tree (MST) Information STP Enabled : Yes Force Version : MSTP-operation IST Mapped VLANs : 1-4094 Switch MAC Address : 002347-cb1380 Switch Priority : 40960 Max Age : 20 Max Hops : 20 Forward Delay : 15 Topology Change Count : 121,430 Time Since Last Change : 0 secs CST Root MAC Address : 002334-e10c00 CST Root Priority : 0 CST Root Path Cost : 200000 CST Root Port : 23 IST Regional Root MAC Address : 002347-cb1380 IST Regional Root Priority : 40960 IST Regional Root Path Cost : 0 IST Remaining Hops : 20 Root Guard Ports : TCN Guard Ports : BPDU Protected Ports : BPDU Filtered Ports : PVST Protected Ports : PVST Filtered Ports : | Prio | Designated Hello Port Type | Cost rity State | Bridge Time PtP Edge ----- --------- + --------- ----- ---------- + ------------- ----- --- ---- 3 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 4 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 5 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 6 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 7 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 8 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 9 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 10 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 11 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 12 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 13 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 14 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes No 15 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes Yes 16 100/1000T | 20000 128 Forwarding | 002347-cb1380 2 Yes Yes 17 100/1000T | Auto 128 Disabled | 18 100/1000T | Auto 128 Disabled | 19 100/1000T | Auto 128 Disabled | 20 100/1000T | Auto 128 Disabled | 21 100/1000T | Auto 128 Disabled | 22 100/1000T | Auto 128 Disabled | 23 100/1000T | 200000 128 Forwarding | 0023ab-dc3680 2 Yes No 24 100/1000T | 200000 128 Blocking | 0023ab-dc3680 2 Yes No Trk1 | 20000 64 Blocking | 002347-c7b4c0 2 Yes No SWITCH02# show spanning-tree instance ist IST Instance Information Instance ID : 0 Mapped VLANs : 1-4094 Switch Priority : 40960 Topology Change Count : 122,474 Time Since Last Change : 3 secs Regional Root MAC Address : 002347-cb1380 Regional Root Priority : 40960 Regional Root Path Cost : 0 Regional Root Port : This switch is root Remaining Hops : 20 Designated Port Type Cost Priority Role State Bridge ----- --------- --------- -------- ---------- ---------- ------------- 3 100/1000T 20000 128 Designated Forwarding 002347-cb1380 4 100/1000T 20000 128 Designated Forwarding 002347-cb1380 5 100/1000T 20000 128 Designated Forwarding 002347-cb1380 6 100/1000T 20000 128 Designated Forwarding 002347-cb1380 7 100/1000T 20000 128 Designated Forwarding 002347-cb1380 8 100/1000T 20000 128 Designated Forwarding 002347-cb1380 9 100/1000T 20000 128 Designated Forwarding 002347-cb1380 10 100/1000T 20000 128 Designated Forwarding 002347-cb1380 11 100/1000T 20000 128 Designated Forwarding 002347-cb1380 12 100/1000T 20000 128 Designated Forwarding 002347-cb1380 13 100/1000T 20000 128 Designated Forwarding 002347-cb1380 14 100/1000T 20000 128 Designated Forwarding 002347-cb1380 15 100/1000T 20000 128 Designated Forwarding 002347-cb1380 16 100/1000T 20000 128 Designated Forwarding 002347-cb1380 17 100/1000T Auto 128 Disabled Disabled 18 100/1000T Auto 128 Disabled Disabled 19 100/1000T Auto 128 Disabled Disabled 20 100/1000T Auto 128 Disabled Disabled 21 100/1000T Auto 128 Disabled Disabled 22 100/1000T Auto 128 Disabled Disabled 23 100/1000T 200000 128 Root Forwarding 0023ab-dc3680 24 100/1000T 200000 128 Alternate Blocking 0023ab-dc3680 Trk1 20000 64 Alternate Blocking 002347-c7b4c0

These switches host 2 separate port-based VLANs:

CODE

ACT-STAR-SW01# show vlans Status and Counters - VLAN Information Maximum VLANs to support : 256 Primary VLAN : PROD Management VLAN : VLAN ID Name | Status Voice Jumbo ------- -------------------- + ---------- ----- ----- 1 DEFAULT_VLAN | Port-based No No 118 DMZ | Port-based No No 119 PROD | Port-based No No
These VLAN ID's match the upstream VLAN ID's of the supplier network we're uplinking into.
VLAN 118 only exists on a couple of the distribution switches that host DMZ kit, VLAN 119 exists on all distribution switches...

Upstream of these switches is our hosting providers network, which we don't really know much about, other than it's Cisco kit, and we've set a lower priority on our Core switches as to not interfere with their platform. The upstream services link into ports 23 and 24.

From the Core switches, we've then got a distribution layer which is responsible for local rack connectivity. These consist of HP 2810-48G switches in pairs in the rack, with redundant upstream connections to SWITCH01 and SWITCH02.
E.g: SWITCH03 Port1 goes to SWITCH01, SWITCH03 Port2 goes to SWITCH02, SWITCH04 Port1 goes to SWITCH01, SWITCH04 Port2 goes to SWITCH02...

One issue I can see looking through the distribution layer switches, is that they all seem to be treating themselves as the Regional Root switch. My understanding of STP is that this is bad...
E.g.:

CODE

SWITCH03# show spanning-tree instance ist IST Instance Information Instance ID : 0 Mapped VLANs : 1,118,119 Switch Priority : 61440 Topology Change Count : 32 Time Since Last Change : 18 days Regional Root MAC Address : b439d6-00aac0 Regional Root Priority : 61440 Regional Root Path Cost : 0 Regional Root Port : This switch is root Remaining Hops : 20 Designated Port Type Cost Priority Role State Bridge ----- --------- --------- -------- ---------- ---------- ------------- 1 100/1000T 20000 128 Root Forwarding 002347-c7b4c0 2 100/1000T 20000 128 Alternate Blocking 002347-cb1380 3 100/1000T 20000 128 Designated Forwarding b439d6-00aac0 4 100/1000T 20000 128 Designated Forwarding b439d6-00aac0 ... SWITHC03# show spanning-tree config Multiple Spanning Tree (MST) Configuration Information STP Enabled [No] : Yes Force Version [MSTP-operation] : MSTP-operation Default Path Costs [802.1t] : 802.1t MST Configuration Name : b439d600aac0 MST Configuration Revision : 0 Switch Priority : 61440 Forward Delay [15] : 15 Hello Time [2] : 2 Max Age [20] : 20 Max Hops [20] : 20 | Path Prio Admin Auto Admin Hello Root TCN BPDU Port Type | Cost rity Edge Edge PtP Time Guard Guard Flt ----- --------- + --------- ----- ----- ----- ----- ------ ------ ------ ---- 1 100/1000T | Auto 128 No Yes True Global No No No 2 100/1000T | Auto 128 No Yes True Global No No No 3 100/1000T | Auto 128 No Yes True Global No No No 4 100/1000T | Auto 128 No Yes True Global No No No ... SWITCH03# show spanning-tree Multiple Spanning Tree (MST) Information STP Enabled : Yes Force Version : MSTP-operation IST Mapped VLANs : 1,118,119 Switch MAC Address : b439d6-00aac0 Switch Priority : 61440 Max Age : 20 Max Hops : 20 Forward Delay : 15 Topology Change Count : 32 Time Since Last Change : 18 days CST Root MAC Address : 002334-e10c00 CST Root Priority : 0 CST Root Path Cost : 220000 CST Root Port : 1 IST Regional Root MAC Address : b439d6-00aac0 IST Regional Root Priority : 61440 IST Regional Root Path Cost : 0 IST Remaining Hops : 20 Root Guard Ports : TCN Guard Ports : Protected Ports : Filtered Ports : | Prio | Designated Hello Port Type | Cost rity State | Bridge Time PtP Edge ----- --------- + --------- ----- ---------- + ------------- ----- --- ---- 1 100/1000T | 20000 128 Forwarding | 002347-c7b4c0 2 Yes No 2 100/1000T | 20000 128 Blocking | 002347-cb1380 2 Yes No 3 100/1000T | 20000 128 Forwarding | b439d6-00aac0 2 Yes Yes 4 100/1000T | 20000 128 Forwarding | b439d6-00aac0 2 Yes Yes ...

I've also been reading the HP 'Advanced Traffic Management Guide', and that suggests that you should create an instance per VLAN. Is this valid?

How else could I simplify this set-up and get the best out of it?

Apologies for the length, and thanks in advance for any information.

Regards
Gavin

RE: Issues with MSTP on HP Procurves

I really wouldn't recommend per-VLAN STP.

There's definitely something very ugly going on there for you.

I would sit down and draw up your network and plan your spanning tree properly from scratch and then implement it.

(The first problem is you've got Procurve 2910s in your "core". Terrible choice. Your "Core" should be a pair of stackable layer3 switches).

The first thing I would change urgently is: your Spanning-tree priority on Switch 1 to 4096, and switch 2 to 8192. I have no idea what those values are that you've got there, but they don't look good.

Then,
- check the "trunk" configuration between the two 2910s. make sure it's good. check vlan config is absolutely identical on all trunked-together ports
- check to make sure all switches are running the same version of spanning-tree

RE: Issues with MSTP on HP Procurves

(OP)
VinceWhirlwind

Cheers for the info.

The network as it stands looks like this:


Unfortunately I'm not a networking expert, so am not sure what constitutes best practise for Spanning Tree design.
I also agree that the core is far from ideal, and we're planning on changing the core next year for a HP chassis switch which is more suitable for the job. However in the mean time we'd like to get these issues resolved...

The Priorities that are set on these switches are as high as they are due to the upstream network configuration.
The relevant config looks like:

CODE

SWITCH01# show config ... spanning-tree spanning-tree Trk1 priority 4 spanning-tree priority 9 SWITCH02# show config ... spanning-tree spanning-tree Trk1 priority 4 spanning-tree priority 10

With regards to the Trunks, as far as I can see it all looks configured correctly:

CODE

SWITCH01# show trunks Load Balancing Port | Name Type | Group Type ---- + -------------------------------- --------- + ----- -------- 1 | 100/1000T | Trk1 Trunk 2 | 100/1000T | Trk1 Trunk SWITCH01# show vlans ports Trk1 Status and Counters - VLAN Information - for ports Trk1 VLAN ID Name | Status Voice Jumbo ------- -------------------- + ---------- ----- ----- 118 DMZ | Port-based No No 119 PROD | Port-based No No ... SWITCH02# show trunks Load Balancing Port | Name Type | Group Type ---- + -------------------------------- --------- + ----- -------- 1 | 100/1000T | Trk1 Trunk 2 | 100/1000T | Trk1 Trunk SWITCH02# show vlans ports Trk1 Status and Counters - VLAN Information - for ports Trk1 VLAN ID Name | Status Voice Jumbo ------- -------------------- + ---------- ----- ----- 118 DMZ | Port-based No No 119 PROD | Port-based No No

From the previous show spanning-tree config outputs, it looks like all the switches are running the same spanning-tree version, all look set to 'MSTP-operation'...

Any further info welcome.

Cheers again.
Gavin

RE: Issues with MSTP on HP Procurves

Nice diagram.

Your problem is the spanning tree priorities your hosting provider has set. I assume these two routers are doing your inter-VLAN routing?
You can see from your "show spanning-tree" that your spanning-tree topology is in a continuous cycle of reconfiguring itself due to the provider putting the same priority on both its "routers". (What are they, really?)

The provider should really have two routed ports presented on your site, each patched into one of your switches, and doing HSRP or VRRP and not participating in your spanning-tree. OR, they should be configured properly for spanning-tree.

RE: Issues with MSTP on HP Procurves

(OP)
Unfortunately I don't know much about the upstream network, other than they've got multiple layers of distribution and core switches.
I can also confirm that the Firewall is responsible for any inter-VLAN routing.

It would also appear that the Cisco switches have recently been configured to use MSTP.

It's also probably not clear on the diagram, but we've been provided 4 uplinks into their network, which are meant to be 2 per VLAN. However it appears that both VLANs work on all links, which has meant we've mis-configured the uplinks our side. So rather than having 118 on one active uplink, and 119 on another, we've got both 118 and 119 on the same uplink from each switch. This has been on the to-do list to fix for a while, but we haven't had the opportunity as yet... So not sure if this is further complicating matters...

RE: Issues with MSTP on HP Procurves

Well, get rid of the criss-cross redundancy for the moment then.

Then have a look at your "sh spanning-tree" and see if that stops it form re-configuring its topology every few seconds.

Your provider allowing all VLANs to work sounds like they just aren't filtering VLANs on their trunks. It sounds like they really haven't put much effort into setting this up correctly with you. The VLANs aren't really a problem - set them up so both VLANs are available on the trunks to each router, but have each router patched into one of your switches each, not both of them.

So

R1 R2
| |
| |
S1-------S2

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close