☰

HP 到 Cisco 生成树根抖动

tag-icon • tag-icon cisco hp-procurve cisco-catalyst stp spanning-tree
HP 到 Cisco 生成树根抖动

根据最近的一个问题，我最近将我的 HP (2x 2900) 和 Cisco (1x 3750) 硬件配置为使用 MSTP 实现互操作性。我以为这是可行的，直到我将更改应用于第三个设备（下面的 HP 交换机 1），此时生成树根开始抖动，导致我的两个 HP 交换机之间出现性能问题（5% 的数据包丢失）。我不确定为什么。

HP Switch 1 A4 连接到 Cisco 1/0/1。HP Switch 2 B2 连接到 Cisco 2/0/1。HP Switch 1 A2 连接到 HP Switch 2 A1。我更希望 Cisco 堆栈充当根。

编辑：

HP 交换机 2 中有一行特定的行 - “spanning-tree 1 path-cost 500000”，我没有添加，而且是预先存在的。我不确定它是否会产生我所描述的那种影响。我更擅长安全和监控，而不是网络。

编辑2：

我开始相信问题在于 Cisco 上的 MST 0 实例的值仍为默认值 32768。我制作了一个图表：生成树 MAC 关联 这是基于我能找到的 STP 的每个 show 命令。我会在几个小时后进行此更改，看看是否有帮助。

Cisco 3750 配置：

version 12.2

spanning-tree mode mst
spanning-tree extend system-id
spanning-tree mst configuration
 name mstp
 revision 1
 instance 1 vlan 1, 40, 70, 100, 250
spanning-tree mst 1 priority 0
vlan internal allocation policy ascending

interface TenGigabitEthernet1/1/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface TenGigabitEthernet2/1/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface Vlan1
 no ip address
!
interface Vlan100
 ip address 192.168.100.253 255.255.255.0
!

Cisco 3750 显示生成树：

show spanning-tree

MST0
  Spanning tree enabled protocol mstp
  Root ID    Priority    32768
             Address     0004.ea84.5f80
             Cost        200000
             Port        53 (TenGigabitEthernet1/1/1)
             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    32768  (priority 32768 sys-id-ext 0)
             Address     a44c.11a6.7c80
             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec

Interface           Role Sts Cost      Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Te1/1/1             Root FWD 2000      128.53   P2p


MST1
  Spanning tree enabled protocol mstp
  Root ID    Priority    1
             Address     a44c.11a6.7c80
             This bridge is the root
             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    1      (priority 0 sys-id-ext 1)
             Address     a44c.11a6.7c80
             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec

Interface           Role Sts Cost      Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Te1/1/1             Desg FWD 2000      128.53   P2p

Cisco 3750 显示日志：

%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan100, changed state to down
%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan100, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up

HP交换机1：

; J9049A Configuration Editor; Created on release #T.13.71
vlan 1
   name "DEFAULT_VLAN"
   untagged 1-8,10,13-16,18-23,A1-A4
   ip address 100.100.100.17 255.255.255.0
   no untagged 9,11-12,17,24
   exit
vlan 100
   name "192.168.100"
   untagged 9,11-12,17,24
   tagged 1-8,10,13-16,18-23,A1-A4
   no ip address
   exit
vlan 21
   name "Users_2"
   tagged 1,A1-A4
   no ip address
   exit
vlan 40
   name "Cafe"
   tagged 1,4,7,A1-A4
   no ip address
   exit
vlan 250
   name "Firewall"
   tagged 1,4,7,A1-A4
   no ip address
   exit
vlan 70
   name "DMZ"
   tagged 1,4,7-8,13,A1-A4
   no ip address
   exit
spanning-tree
spanning-tree config-name "mstp"
spanning-tree config-revision 1
spanning-tree instance 1 vlan 1 40 70 100 250
password manager
password operator

HP Switch 1显示生成树：

 show spanning-tree

 Multiple Spanning Tree (MST) Information

  STP Enabled   : Yes
  Force Version : MSTP-operation
  IST Mapped VLANs : 2-39,41-69,71-99,101-249,251-4094
  Switch MAC Address : 0021f7-126580
  Switch Priority    : 32768
  Max Age  : 20
  Max Hops : 20
  Forward Delay : 15

  Topology Change Count  : 363,490
  Time Since Last Change : 14 hours

  CST Root MAC Address : 0004ea-845f80
  CST Root Priority    : 32768
  CST Root Path Cost   : 200000
  CST Root Port        : 1

  IST Regional Root MAC Address : 0021f7-126580
  IST Regional Root Priority    : 32768
  IST Regional Root Path Cost   : 0
  IST Remaining Hops            : 20

  Root Guard Ports     :
  TCN Guard Ports      :
  BPDU Protected Ports :
  BPDU Filtered Ports  :
  PVST Protected Ports :
  PVST Filtered Ports  :

                  |           Prio            | Designated    Hello
  Port  Type      | Cost      rity State      | Bridge        Time PtP Edge
  ----- --------- + --------- ---- ---------- + ------------- ---- --- ----
  A1              | Auto      128  Disabled   |
  A2    10GbE-CX4 | 2000      128  Forwarding | 0021f7-126580 2    Yes No
  A3    10GbE-CX4 | Auto      128  Disabled   |
  A4    10GbE-SR  | Auto      128  Disabled   |

HP Switch 1 日志记录：我删除了日期/时间字段，因为它们不准确（这些交换机上没有配置 NTP）

00839 stp: MSTI 1 Root changed from 0:a44c11-a67c80 to 32768:0021f7-126580
00839 stp: MSTI 1 Root changed from 32768:0021f7-126580 to 0:a44c11-a67c80
00842 stp: MSTI 1 starved for an MSTI Msg Rx on port A4 from 0:a44c11-a67c80
00839 stp: MSTI 1 Root changed from 0:a44c11-a67c80 to 32768:0021f7-126580
00839 stp: MSTI 1 Root changed from 32768:0021f7-126580 to 0:a44c11-a67c80
00839 stp: MSTI 1 Root changed from 0:a44c11-a67c80 to ...

HP Switch 2配置：

; J9146A Configuration Editor; Created on release #W.14.49

vlan 1
   name "DEFAULT_VLAN"
   untagged 1,3-17,21-24,A1-A2,B2
   ip address 100.100.100.36 255.255.255.0
   no untagged 2,18-20,B1
   exit
vlan 100
   name "192.168.100"
   untagged 2,18-20
   tagged 1,3-17,21-24,A1-A2,B1-B2
   no ip address
   exit
vlan 21
   name "Users_2"
   tagged 1,A1-A2,B2
   no ip address
   exit
vlan 40
   name "Cafe"
   tagged 1,13-14,16,A1-A2,B2
   no ip address
   exit
vlan 250
   name "Firewall"
   tagged 1,13-14,16,A1-A2,B2
   no ip address
   exit
vlan 70
   name "DMZ"
   tagged 1,13-14,16,A1-A2,B2
   no ip address
   exit
logging 192.168.100.18
spanning-tree
spanning-tree 1 path-cost 500000
spanning-tree config-name "mstp"
spanning-tree config-revision 1
spanning-tree instance 1 vlan 1 40 70 100 250

HP Switch 2 生成树：

show spanning-tree

 Multiple Spanning Tree (MST) Information

  STP Enabled   : Yes
  Force Version : MSTP-operation
  IST Mapped VLANs : 2-39,41-69,71-99,101-249,251-4094
  Switch MAC Address : 0024a8-cd6000
  Switch Priority    : 32768
  Max Age  : 20
  Max Hops : 20
  Forward Delay : 15

  Topology Change Count  : 21,793
  Time Since Last Change : 14 hours

  CST Root MAC Address : 0004ea-845f80
  CST Root Priority    : 32768
  CST Root Path Cost   : 200000
  CST Root Port        : A1

  IST Regional Root MAC Address : 0021f7-126580
  IST Regional Root Priority    : 32768
  IST Regional Root Path Cost   : 2000
  IST Remaining Hops            : 19

  Root Guard Ports     :
  TCN Guard Ports      :
  BPDU Protected Ports :
  BPDU Filtered Ports  :
  PVST Protected Ports :
  PVST Filtered Ports  :

                  |           Prio            | Designated    Hello
  Port  Type      | Cost      rity State      | Bridge        Time PtP Edge
  ----- --------- + --------- ---- ---------- + ------------- ---- --- ----
  A1    10GbE-CX4 | 2000      128  Forwarding | 0021f7-126580 2    Yes No
  A2    10GbE-CX4 | Auto      128  Disabled   |
  B1    SFP+SR    | 2000      128  Forwarding | 0024a8-cd6000 2    Yes No
  B2              | Auto      128  Disabled   |

HP Switch 2 日志记录：我删除了日期/时间字段，因为它们不准确（这些交换机上没有配置 NTP）

00839 stp: CST Root changed from 32768:0021f7-126580 to 32768:0004ea-845f80
00839 stp: IST Root changed from 32768:0021f7-126580 to 32768:0024a8-cd6000
00839 stp: CST Root changed from 32768:0004ea-845f80 to 32768:0024a8-cd6000
00839 stp: CST Root changed from 32768:0024a8-cd6000 to 32768:0004ea-845f80
00839 stp: CST Root changed from 32768:0004ea-845f80 to 32768:0024a8-cd6000
00435 ports: port B1 is Blocked by STP
00839 stp: CST Root changed from 32768:0024a8-cd6000 to 32768:0021f7-126580
00839 stp: IST Root changed from 32768:0024a8-cd6000 to 32768:0021f7-126580
00839 stp: CST Root changed from 32768:0021f7-126580 to 32768:0004ea-845f80

答案1

您能将 MST 实例号更改为 0 吗？我认为这可能是导致您出现问题的原因，MST 默认运行实例 0，因此您创建了两个实例，实例 1 具有您已映射的 VLAN，实例 0 具有所有其他 VLAN。根据您的 Cisco 配置判断，您应该只需要一个实例：

spanning-tree mst configuration
 name mstp
 revision 1
 instance 0 vlan 1, 40, 70, 100, 250
 spanning-tree mst 0 root primary

奇怪的是，您的根节点在抖动，但您只设置了实例 1 的优先级，而不是 0。将其全部移动到实例 0，并将 HP 交换机上的 MST 实例 0 的优先级设置为高于默认值。这样，只要它在网络上，根节点就始终是 3750。

在 HP 交换机上：

spanning-tree
spanning-tree config-name "mstp"
spanning-tree config-revision 1
spanning-tree instance 0 vlan 1 40 70 100 250
spanning-tree priority 36864

生成树路径成本命令的配置可能是为了阻止 HP2 成为根：

语法：spanning-tree < port-list > path-cost < auto | 1..200000000 >

分配单个端口成本，交换机使用该成本来确定给定生成树中哪些端口是转发端口。在默认配置 ( auto ) 中，交换机根据端口类型确定端口的路径成本：–

10 Mbps：2000000 –

100 Mbps：200000 –

1Gbps：20000

有关运行 802.1D STP 的设备的路径成本值的兼容性信息，请参阅第 4-17 页的“有关路径成本的注意事项”（默认值：自动）。

来自HP 高级流量管理指南第 138 页。如果您没有添加路径成本语句，我会将其删除，并在您想要成为根的交换机上将桥优先级设置为更高。如果那是思科，那么您已经按照我的命令进行了设置。

答案2

哇。。经过所有的研究，我发现我唯一缺少的就是将 MST 0 实例值设置为低于默认值的值。一旦我将其设置为 4096，所有显示生成树配置都会开始按预期运行，显示 Cisco mac 作为根。

GerryEgan 的解决方案可以工作，因为它还会将 MST 0 实例更改为较低的值。但是我最终希望能够使用两个 10 千兆链路，一个用于 VLAN 1，一个用于 VLAN 100。这个一般设置是粗略地考虑到这个最终目标而制定的。我没有将它包括在问题中，因为它实际上并不相关——我迫切需要任何解决方案。

总结一下，为了配置这个设置我使用了：

思科 3750

spanning-tree mode mst
spanning-tree extend system-id
spanning-tree mst configuration
 name mstp
 revision 1
 instance 1 vlan 1, 40, 70, 100, 250
spanning-tree mst 1 priority 0
spanning-tree mst 0 priority 4096

HP 交换机

spanning-tree
spanning-tree config-name "mstp"
spanning-tree config-revision 1
spanning-tree instance 1 vlan 1 40 70 100 250

相关内容