Hi,
6509 trunks with Aruba 3600 controller that connects (VPN IPSec) to around 110 Aruba APs, these are usually home offices, some of which are having switches connected to the Aruba ports for switchport expension.
There is only one uplink to the controller and no alterneate path what so ever. The port is going into "Back BLK" because of seeings its own BPDU. So after working with Cisco TAC, we deterimed that there has to be a physical loop somewhere behind the 3600 controller ( hub device) or potential software bug that cauases the BPDU to turn around.
Now TAC has recommened to implement bpdu filter on the uplink trunk to help determine the source of the loop and look at MAC flaps/notification. The uplink trunk has 3 VLANs and only 956 is being affected. The senior mgmt is affraid that implementing the bpdu filter will cause more harm.
We dont't have access to all RAPs because of how big the network is, so the only place where we do configuration changes is Cisco. Aruba saying there is nothing with their software that could be casuing this.
Any advice here is highly appriciated
Attaching a hand written network diagram
VLAN0956
Spanning tree enabled protocol rstp
Root ID Priority 8192
Address x.x.x.x x.x.x.x x.x.x.x
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 8192
Address x.x.x.x x.x.x.x x.x.x.x
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Gi2/27 Back BLK 4 128.155 P2p
interface GigabitEthernet2/27
switchport
switchport trunk encapsulation dot1q
switchport trunk native vlan 955
switchport trunk allowed vlan 954-956
switchport mode trunk
