STP Blocking on 5308XL

[Ashok K Gurung]

Hi

We are getting following logs often now a days, we were wondering if you guys can make any sense out of it.

I am suspecting this is the reason why we are getting lots of VIP error on our firewall. we are using Juniper SSG14

I 07/13/07 03:28:37 ports: port H2 is now on-line
I 07/13/07 03:29:30 ports: port H2 is now off-line
I 07/13/07 03:29:33 ports: port H2 is Blocked by LACP
I 07/13/07 03:29:35 ports: port H2 is Blocked by STP
I 07/13/07 03:30:05 ports: port H2 is now on-line
I 07/13/07 03:53:18 ports: port D2 is now off-line
I 07/13/07 03:53:18 vlan: Mel-Admin virtual LAN disabled
I 07/13/07 03:53:23 ports: port D2 is Blocked by LACP
I 07/13/07 03:53:26 ports: port D2 is Blocked by STP
I 07/13/07 03:53:26 ports: port D2 is now on-line
I 07/13/07 03:53:41 vlan: Mel-Admin virtual LAN enabled
W 07/13/07 03:54:04 FFI: port D2-High collision or drop rate. See help.
I 07/13/07 03:54:06 ports: port D2 is now off-line
I 07/13/07 03:54:06 vlan: Mel-Admin virtual LAN disabled
I 07/13/07 03:54:07 ports: port D2 is Blocked by LACP
I 07/13/07 03:54:10 ports: port D2 is Blocked by STP
I 07/13/07 03:54:10 ports: port D2 is now on-line
I 07/13/07 03:54:11 ports: port D2 is now off-line
I 07/13/07 03:54:13 ports: port D2 is Blocked by LACP
I 07/13/07 03:54:15 ports: port D2 is Blocked by STP
I 07/13/07 03:54:16 ports: port D2 is now on-line
I 07/13/07 03:54:30 vlan: Mel-Admin virtual LAN enabled
I 07/13/07 03:58:56 ports: port H2 is now off-line
I 07/13/07 03:58:59 ports: port H2 is Blocked by LACP
I 07/13/07 03:59:02 ports: port H2 is Blocked by STP
I 07/13/07 03:59:05 ports: port H2 is now off-line
I 07/13/07 03:59:07 ports: port H2 is Blocked by LACP
I 07/13/07 03:59:10 ports: port H2 is Blocked by STP
W 07/13/07 03:59:26 FFI: port H2-Excessive Broadcasts. See help.
I 07/13/07 03:59:40 ports: port H2 is now on-line
W 07/13/07 04:01:32 FFI: port H2-High collision or drop rate. See help.
I 07/13/07 04:19:18 ports: port H2 is now off-line
I 07/13/07 04:19:20 ports: port H2 is Blocked by LACP
I 07/13/07 04:19:23 ports: port H2 is Blocked by STP
I 07/13/07 04:19:53 ports: port H2 is now on-line
I 07/13/07 04:30:53 ports: port H2 is now off-line
I 07/13/07 04:30:56 ports: port H2 is Blocked by LACP
I 07/13/07 04:30:58 ports: port H2 is Blocked by STP
I 07/13/07 04:31:28 ports: port H2 is now on-line
I 07/13/07 04:34:18 ports: port H2 is now off-line
I 07/13/07 04:34:20 ports: port H2 is Blocked by LACP
I 07/13/07 04:34:23 ports: port H2 is Blocked by STP
I 07/13/07 04:34:53 ports: port H2 is now on-line
I 07/13/07 04:35:52 ports: port H2 is now off-line
I 07/13/07 04:35:55 ports: port H2 is Blocked by LACP
I 07/13/07 04:35:58 ports: port H2 is Blocked by STP
I 07/13/07 04:36:28 ports: port H2 is now on-line
I 07/13/07 04:37:39 ports: port H2 is now off-line
I 07/13/07 04:37:41 ports: port H2 is Blocked by LACP
I 07/13/07 04:37:44 ports: port H2 is Blocked by STP
I 07/13/07 04:38:14 ports: port H2 is now on-line
I 07/13/07 04:42:08 ports: port H2 is now off-line
I 07/13/07 04:42:10 ports: port H2 is Blocked by LACP
I 07/13/07 04:42:13 ports: port H2 is Blocked by STP
I 07/13/07 04:42:19 ports: port H2 is now off-line
I 07/13/07 04:42:23 ports: port H2 is Blocked by LACP
I 07/13/07 04:42:25 ports: port H2 is Blocked by STP
W 07/13/07 04:42:29 FFI: port H2-Excessive Broadcasts. See help.
I 07/13/07 04:42:55 ports: port H2 is now on-line
W 07/13/07 04:43:32 FFI: port H2-High collision or drop rate. See help.
I 07/13/07 04:54:21 ports: port H2 is now off-line
I 07/13/07 04:54:24 ports: port H2 is Blocked by LACP
I 07/13/07 04:54:26 ports: port H2 is Blocked by STP

Thank you in advance

[Mohieddin Kharnoub]

Hi

I had a similar situation with the SSG140 connected to a 5400 after upgrading the fimware to k.12.14, and the CPU utilization was over 70% on the Juniper box until i downgraded the 5400 to k.12.05.

So check what changes you have done recently and undo it.

Also, you should be careful of the Spanning tree configuration.

If you are using the RSTP or legacy STP, then you should assign the priorities according to your LAN topology, and that will insure a stable Spanning tree topology.

and If you are using MSTP with multiple instances and priorities, then Check the IST or CST priority, and assign it again according to your lan topology.

If that didn't help, post your 5300 configuration after removing any personal or company's information, and i'm sure you can find a good help here.

Good Luck !!!

[Ashok K Gurung]

Hi thank you for your reply

for now we have disabled all STP protocols and LACP and everything working fine. we are doing some more investigation where things went wrong.

We were using MSTP and we didn't even know we had LACP enabled. We are using Dell switches on our floors and they supports MSTP.

thank you again