cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
413
Views
4
Helpful
5
Replies

observed huge amount of STP BPDU in Cat3550

chleong
Level 1
Level 1

Hi, my customer network is facing some intermittent connectivity problem lately. After deploying a sniffer, there seems to be a huge amount of STP BPDU during the outage. The host connected to this switch cannot receive any packet from the router which is on the same segment. I have attached a print screen for your reference. Any advice is much appreciated. Thanks.

5 Replies 5

Francois Tallet
Level 7
Level 7

A huge amount of STP bpdus??? I see one bpdu every two seconds, which is the default hello time for STP. Basically, that's as few bpdus as can be;-)

The topology change flags are not even set in the bpdu decoded, which suggests that STP has not detected a change recently (it does not mean there cannot be an L2 issue).

If you have spotted two systems that have problem communicating together during the outage, that's already a great step in term of troubleshooting. Could you provide us with the "sho span" output for the ports on the path between these two hosts? (when the problem does not occur and, if possible, when the problem occurs). This should quickly show if STP is involved.

Regards,

Francois

vijayasankar
Level 4
Level 4

Hi,

From the sniffer capture screenshot, i couldn't see any abnormal activity.

The BPDUs that are visible in the capture are normal ones.

They are just the normal configuration BPDU's where are transmitted every 2 seconds.

If we could notice any TCN BPDU's then it might indicate a potential problem happening in some part of the network.

But in the trace provided, there are not TCN BPDU's. Hence the problem that is faced in this network might not be related STP.

Have you captured any diagnostic command outputs from the Switch to augment that the issue might be related to STP.? ( show spanning-tree related commands)

Kindly provide us more details on the problem faced by the customer and any related troubleshooting done to isolate the issue.

-VJ

Danilo Dy
VIP Alumni
VIP Alumni

STP makes certain assumptions about its operational environment. These are the assumptions most relevant to this document:

Each link between the two bridges is bidirectional. This means that, if A directly connects to B, then A will receive what B has sent and B will receive what A has sent, as long as the link is up between them.

Each bridge that is running STP is able to regularly receive, process, and transmit STP Bridge Protocol Data Units (BPDUs), also known as STP packets.

While these assumptions appear logical and obvious, there are situations when they are not met. Most of these situations involve some sort of hardware issue; however, software defects may also lead to STP failures. Various hardware failures, misconfigurations, or miscabling cause the majority of STP failures, while software failures account for the minority. STP failures can also occur due to unnecessary additional connections that exist between the switches. VLANs go into a down state because of these additional connections. To resolve this problem, remove all of the unwanted connections between the switches.

When one of these assumptions is not met, one or more bridges might no longer receive or process the BPDUs. This means that the bridge (or bridges) will not be able to discover the network topology. Without knowledge of the correct topology, the switch can not block the loops. Therefore, the flooded traffic will circulate over the looped topology, consume all bandwidth, and bring down the network.

Examples of why the switches may not receive BPDUs include bad transceivers or Gigabit Interface Converters (GBICs), cabling issues, or hardware failures on the port, the linecard, or the Supervisor engine. One frequent reason for STP failures is a unidirectional link between the bridges. In such a condition, one bridge sends BPDUs, but the downstream bridge never receives them. STP processing can also be disrupted by an overloaded CPU (99 percent or more), because the switch is unable to process received BPDUs. BPDUs can be corrupted along the path from one bridge to the other, which also prevents proper STP behavior.

Aside from the forwarding loops, when no ports are blocked, there are situations when only certain packets are incorrectly forwarded through the blocking ports. In most cases, this is caused by software issues. Such behavior might cause “slow-loops.” This means some packets are looped, but the majority of the traffic is still flowing through the network, because the links are probably not congested.

The remaining sections in this document provide guidelines to troubleshoot the most common STP-related issues

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.
https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/24063-pvid-inconsistency-24063.html

Review Cisco Networking products for a $25 gift card