Core Switch Issue 5412zl

[shinepothen]

Hi All

we have come across an issue on our 5412zl core switch, suddenly i got this message in the logs.

W 09/19/17 14:12:09 02581 ip: ST1-CMDR: IPv4: Duplicate IPv4 address 10.10.40.71
            is detected on VLAN 1 with a MAC address of 9cdc71-04c27f (133 times
            in 60 seconds)

My VLan 1 ip address is 10.10.40.71 when i run the command sh spanning tree

MRF-DC-CORE-SW# sh spanning-tree

 Multiple Spanning Tree (MST) Information

  STP Enabled   : Yes
  Force Version : MSTP-operation
  IST Mapped VLANs : 1-4094
  Switch MAC Address : 9cdc71-04c27f  (the same mac address which is shown in the logs)
  Switch Priority    : 32768
  Max Age  : 20
  Max Hops : 20
  Forward Delay : 15

----------------------------------------------------------------------------------------

The consequence we faced was all the vlans on the switch went to disable mode and then got enabled there was total down time of 12 mins,

belong is logs for one vlan

I 09/19/17 14:12:11 00839 stp: ST1-CMDR: CST Root changed from 32768:
            0002b9-32e200 to 32768: 0019bb-93c700
I 09/19/17 14:12:12 00839 stp: ST1-CMDR: CST Root changed from 32768:
            0019bb-93c700 to 32768: 001279-03da00
I 09/19/17 14:12:12 00435 ports: ST1-CMDR: port 1/I12 is Blocked by STP
I 09/19/17 14:12:12 00002 vlan: ST1-CMDR: Administrator_Vlan_54 virtual LAN
            disabled
I 09/19/17 14:12:12 00002 vlan: ST1-CMDR: ITS_SAP_CG virtual LAN disabled
I 09/19/17 14:12:12 00435 ports: ST1-CMDR: port 1/I4 is Blocked by STP
I 09/19/17 14:12:12 00076 ports: ST1-CMDR: port 1/I4 in Trk54 is now on-line
I 09/19/17 14:12:12 00001 vlan: ST1-CMDR: Administrator_Vlan_54 virtual LAN
            enabled

-----------------------------------------------------------------------------------

Have any one has come across any such issue my environmnet is working prefectly since last 8months since the installation of core 5412 zl.

All your help and support is appreciated.

[Richard Litchfield]

At the very least you need to change your core switch STP priority to 0.

Some other settings that might be useful:

spanning-tree
spanning-tree A1 admin-edge-port
spanning-tree A2 admin-edge-port
spanning-tree B4 admin-edge-port
spanning-tree B7 root-guard
spanning-tree B8 root-guard
spanning-tree B9 root-guard
spanning-tree B10 root-guard
spanning-tree F1 root-guard
spanning-tree F4 root-guard
no spanning-tree bpdu-throttle
spanning-tree trap topology-change instance cst
spanning-tree trap errant-bpdu new-root root-guard loop-guard
spanning-tree bpdu-protection-timeout 120 priority 0

[shinepothen]

Thank you Richard for the reply.

The above issue happned on my core switch which is running VSF Virtual switching. VSF is configure in two 5412Zl switch.

Currently i have made the 5412Zl which is my core switch STP priority 0.

MRF-DC-CORE-SW# sh spanning-tree

 Multiple Spanning Tree (MST) Information

  STP Enabled   : Yes
  Force Version : MSTP-operation
  IST Mapped VLANs : 1-4094
  Switch MAC Address : 9cdc71-04c27f
  Switch Priority    : 0
  Max Age  : 20
  Max Hops : 20
  Forward Delay : 15

  Topology Change Count  : 149,862
  Time Since Last Change : 3 mins

  CST Root MAC Address : 9cdc71-04c27f
  CST Root Priority    : 0
  CST Root Path Cost   : 0
  CST Root Port        : This switch is root

From my core switch I have close to 80 L2/L3 switch connecting to my access layer.

as per your suggestion if do configure port A1 as admin-edge-point the down side switch connecting will have issues ?

spanning-tree A1 admin-edge-port

Please share with me some document to do these config. since i am new to Hp OS and the configuration commands.