Cisco Switching/Routing :: 28672 Two Root Bridges VLAN1 Rapid-pvst
Apr 1, 2013
I have two locations DC and Corp connected to each other via Point to Point Circuit. I have forced the two core switches setup as GLBP pair to be primary and secondary for certain VLAN's including VLAN1.I have a switch in our Corporate office 3750 which is where the point to point circuit terminates. VLAN1 SVI is manually shut on that switch. Also the priority on VLAN1 is increased manually like this, "spanning-tree vlan 1 priority 28672".
Now the issue is that the Primarey Root Bridge in the DC is the root bridge for VLAN 1. But this other switch 3750 in our corporate office also is a root bridge for VLAN1. [code]
View 17 Replies
ADVERTISEMENT
Dec 15, 2011
As a part of a major network cleanup/standardization project I have been working on for several weeks, I am now looking at spanning-tree and trying to get my company into line with Cisco Best Practice. I currently have 3 switches in the data center that are spanning-tree root for different vlans. Before I changing vlan priorities in spanning-tree, I feel that I should change from PVST that everything is on now to Rapid-PVST. To minimize the momentary network disruptions from making the change, should I do the edge switches first and do the switches in the data center at the last ?
Related to this process is something that I want to do probably after the PVST to Rapid-PVST change. I am going to manually set the vlan priorities for each vlan on the main core switch. Assuming I set the vlan priority for each vlan on my main core switch (6509) to 4096, should I set the switch I want to be the backup to 8192 for each vlan and then set the edge switches to something like 12288 to keep them from getting up in the spanning-tree hierarchy and for general principle to leave nothing to chance ?
View 9 Replies
View Related
Nov 15, 2011
i'm trying to type the command (config)#spanning-tree mode rapid-pvst on my Cisco 2950, but (config)#spanning-tree mode ? only shows me one option - pvst. I've checked the Cisco support page which suggests my version of IOS should support rapid-pvst.
Switch_1#sh ver
Cisco Internetwork Operating System Software
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(13)EA1, RELEASE SOFTWARE (fc1)
View 7 Replies
View Related
Jun 13, 2013
Is it possible to configure MST on ASR and have rapid-pvst on 7600? can they interoperate? ASR sees no BPDUs and both are root bridges.
View 2 Replies
View Related
Mar 23, 2013
I can not enable to rapid- protocol in catalyst 6513, does not support for it, only support pvst.
Someone how can i enable to rpvst? You know if is necessary to upgrade IOS, it has
s72033_rp-ENTSERVICESK9_WAN-M - 12.2(18)SXF9 IOS. The cisco software Advisor could not localized the features fot this IOS.
View 1 Replies
View Related
Jan 18, 2012
We have two L3 3750 switches running HSRP and routing for various Vlans on our corporate network. Rapid PVST is running across our entire WAN. We are introducing a third party solution for remote communications over MPLS. When interconnecting this equipment to our core network, we have experienced less than desirable failover times of 32 seconds and recovery times of 60 seconds. The vendors engineers are telling is that the interoperability between IEEE spanning tree and Rapid PVST is the culprit.
They are suggesting two scenarios - either converting our corporate network to MST (which I prefer not to do but provides us the fastest fail/recovery times) or adjust the timers on our Rapid PVST forwarding timer to 4 seconds. What would the implications be to change these timers on our network, and if I choose to do this, do I only do it at the core (on the two devices that would become root bridge)? I have been doing some reading that says to not mess with the timers, but nowhere do I see reasons why.
View 2 Replies
View Related
Nov 14, 2011
3750 switch connects to Blade-switch_1 and Blade-switch_2 Spanning-tree mode is configured as rapid-pvst on 3750 switch, do I need to configure rapid-pvst on both blade-switches or keep the default pvst config.3750 is running VTP domain HQ and transparent mode Both Blade_switches are running VTP domain CLI and transparent mode To configure Etherchannel between 3750 and blade-switch_1 do I need to have all devices in same vtp domain?
View 16 Replies
View Related
Oct 16, 2012
I have a setup where - I have a cisco stack (4X SGE2010 Switches) trunking over to a 3COM switch. Both switches believe to be the "ROOT" of the network. Note The 3COM is running RSTP as opposed to the Cisco Stack which is running normal STP. To my understanding of STP - Essentially STP is not functioning! Both switches believe to be the "ROOT" so they don't shut ports down. (We are currently having major issues with ports going up and down for seconds at a time on both switches)
View 3 Replies
View Related
Oct 18, 2011
i got the problem with 1300 bridges,root bridge with omni antenna and non root with sector antenna , it can associate and can pin each other , but whenever i try to browse several web pages its get timed out and radio was down.
View 5 Replies
View Related
Oct 30, 2008
When I plug in a workstation to 3750 switch - it seems to take about 35 seconds before that workstation (hard coded IP) can ping the switch. You can see the console messages below. I configured RSTP and set this switch to root:
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 22,33,44 priority 8192
[Code].....
View 7 Replies
View Related
May 12, 2013
I have two switches claiming to be the root bridge for the same vlans. The 3750-X stack was configured to be the root for vlans present and the 2960S was brought online over the weekend to replace another one. This is the command I used to attempt and make the 3750-X stack the root
spanning-tree vlan 1-2,10,50,101,200,900,999 root primary diameter 4
The IOS converted that to this
spanning-tree mode rapid-pvst
spanning-tree loopguard default
spanning-tree portfast bpduguard default
[code]......
View 2 Replies
View Related
Apr 9, 2012
My colleague and I have been having a discussion about using rapid spanning tree in the access layer. Most of our infrastructure has been migrated to a routed access layer with 3750s.
The idea was brought up to configure the switches with rapid PVST. On the surface, it seems like a better idea, faster convergence, in the event that spanning tree ends up being used for some reason. My colleague prefers sticking with standard PVST. His argument is that, in the event of a layer 2 loop, some consumer-level switches filter out BPDUs and if the control plane is overwhelmed, the shorter timers of rapid PVST just puts that much more of a burden on the CPU trying to regain control, whereas with standard PVST it will have around 20 seconds before it starts to engage. (It may still be overwhelmed, but the longer timer delays the additional burden.) He says he's seen this problem with rapid PVST and that his opinion is backed up by our Cisco rep. (I haven't spoken to him yet.)
In our model, it should be very rare -- pretty much never -- that we would layer 2 span another switch off of our access stack.
One suggestion I saw is to use BPDU Guard, which is a good suggestion as well.
But we have had experiences with overloading the control plane on a 3750. I believe that concern is valid. If the CPU can't service spanning tree. But I'm interested in hearing about other experiences people have had in terms of rapid spanning tree in the access layer, end users plugging in unauthorized devices and creating loops, and the effects when using rapid spanning tree vs standard spanning tree.
View 6 Replies
View Related
Mar 14, 2013
I have an alcatel 6850 switch connected to a 3750. Two connections (cables) are used between the switches. The two connections from the alcatel are in different vlans 10 and 60 , but the cisco ones are in the same vlan ie 1 (I know not best practice but keep with it ). The cisco cables are connected into port 1 and 4. Port 1 is forwarding and 4 is blocking. The 3750 is configured with basic default pvst configuration.The alcatel is the root bridge. As can be realised traffic from alcatel on vlan 10 cannot pass traffic to the 3750, This was established by the spt seeing the same mac from the root bridge therefore blocking port 4.To stop this from blocking in this scenario I was going to use bpdufilter.
View 1 Replies
View Related
Feb 22, 2012
Stange problem which I encountered today, I have a Cisco 2960 which is connected to a netgear. The switch started showing itself in CDP and was running STP. I checked the cables physically today and noted 3 uplinks to the netgear, all port on the Cisco active and forwarding and green lights.
The Cisco was running STP, I changed it to R-PVST and the lights on the Cisco went crazy and I got the message port flapping on the switch but the switch did not block any ports (all ports on same vlan).
There after I changed it back to stp and the switch blocked the other up links apart from one.
Sure R-PVST is far superior than STP?
View 5 Replies
View Related
May 12, 2013
router 1721 with one wic-1adsl ,i have adsl conection with irb static ip. the router connect with mannaged switch through a trunk port. the switch has 2 vlans one for the static IPs and the other for private lan. i need the private lan to be able to go to internet. vlan2 can go to internet because it has the same subnet with provider but vlan 1 canot go internet, so how i can make all vlans go internet(the router has only 1 fastethernet port)
View 4 Replies
View Related
Jan 16, 2012
I have a problem where only the 2950's switches go transperant. They drop VLAN1 thus no CDP snmp packets. The users keep working fine but our NMS center keeps calling me at 3am when this happens.
These are access switches that connect to stacked 3750's. Some of the uplinks are using media converters that i have been trying to get removed. But i doubt that it could be the cause of the vlan1 going down.
View 3 Replies
View Related
Jan 28, 2013
if i have this config:
switch port mode trunk
trunk aloved vlan 50
will travel over this trunk untagged packets? For eg the V LAN 1 is by default native V LAN without tag. If i have created a bog ring with catalyst 3560x switches with no spanning tree on V LAN 1 can be the case of this config a loop ???
I am using upper config on interfaces that are connected the switches together in ring.
Other interfaces on switch have this config:
int range 0/1-4
switchport mode acc
switchport acc vlan1
int range 0/5-24
switchport mode acc
switchport acc vlan50
I am using vlan1 just for local switching without connection to internet! I am asking just because i have this king of messages in logs:
%CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet1/0/27 (1), with SW3560x_BR8874 GigabitEthernet1/0/19 (50).
GI 1/0/27 and GI 1/0/19 have this config:
switchport mode trunk
trunk aloved vlan 50
View 5 Replies
View Related
Jun 10, 2013
Is there any way to have my Cisco 877W Router alter from using one static route to another static route when another router on the network is reporting destination host unreachable?
Router 1 (192.168.2.253)
Dialer0 -> ppoe to internet
Vlan1 -> local 192.168.2.0/24
Router 2 (192.168.2.254)
Dialer0 -> ppoe to managed VPN (172.16.28.1)
Vlan1 -> local 192.168.2.0/24
Router 2 is connected to another network through a managed VPN and that network also has internet access. I want to be able to have two routes to the internet on Router 2. And when Router 1 internet goes down packets get routed through the VPN instead.
I currently have on Router 2
ip route 0.0.0.0 0.0.0.0 192.168.2.253
ip route 10.0.0.0 255.255.255.0 Dialer0
ip route 0.0.0.0 0.0.0.0 172.16.28.5 250
Which does nothing when Router 1 has its Dialer0 interface shutdown, or goes offline completely.I suspect I could reverse the setup and have everything routed through the VPN by default and then if / when Dialer0 interface goes down it would switch to using Router 2, but if the problem is in the remote network and interface Dialer0 stays up, it would probably do the same thing... nothing.All devices mentioned are Cisco 877W routers with ADSL and a bunch of fast ethernet interfaces.
View 2 Replies
View Related
Feb 16, 2013
I config vlans 21-23 on 3750 A and B switches.I config B switch to be Root Bridge for all vlansspanning-tree vlan 1,21-23, priority 4096 sh span tree on B switch 3750B# sh spanning-tree.
View 18 Replies
View Related
Feb 11, 2013
I have two 6509s both with single FWSMs running in transparent mode with bridged Inside and Outside VLANs.I have my Core A set to STP priority of 8192 and Core B set to 16,384 to make Core A the root for all VLANs.Problem I have is when I look at spanning-tree on Core A for Inside VLAN 324 it states to get to the Root go via PO100 (Cost of 9) and that the Root also has a Priority of 8192, but as the designated Root has a lower MAC address it's pointing to the etherchannel. PO100 is L2 Etherchannel between the Cores.Moving accross PO100 to Core B and running the show spanning-tree command I can see that to get to the Root Bridge I need to go via PO272. PO272 is the internal Etherchannel to get to the FWSM on the Core B Switch. This shows a cost of 6 to get to the Root and a mac address of the Root Bridge which resides on Core A (Outside VLAN 124)To give some perspectibe,theoutside VLAN of the pair has it's STP ROOT on the Core A switch as intended?
View 1 Replies
View Related
Jan 18, 2012
I have an Extremely Old switch that I need to connect to my network. Because it is so old I don't want it to become the Root Switch.
what is the command to change the priority. (Honestly I don't remember if it has to be a lower number 1 or a higher number ). Always get that mixed up. I've read about root guard, but I would like to prevent it manually. (It is a small network after all)It is a Cisco 2950.
View 3 Replies
View Related
Jan 12, 2012
I have 2 3550 12G switches that I use as core fiber switches. Switch 1 is the primary for 1/2 the V LANs and Switch 2 is the primary for the others using MST with 2 instances (I am not including the default 0 instance). I am using HSRP to provide redundancy. So far so good.
Recently a tenant in my building would like to use their own switch for data but still needs access to a V LAN on mine for voice. Again not a problem as I can configure a trunk port and give them what they need. My concern is that if they try to configure STP on their switch can they take down mine. Are there some preventions that I can put into place, such as root guard, that work with MST? What happens if they too set up MST can they kill mine?
Switch 1 is the root for 1/2 the v lans and Switch 2 is the backup root. The scenario is flipped for the other 1/2.
View 3 Replies
View Related
Dec 15, 2012
in my LAN the all access layer switchs/stacks are connected directly to core backbone switch (cisco 6509) via sfp fiber-optic, i want to protect my spanning tree setup with the "root guard" command.
1. where would i set this ? on uplink ports on access layer switches ? or on core backbone ports to which the access layer swithes connect to?.
2. can this be set on active (production) ports without downtime?
View 5 Replies
View Related
Nov 13, 2012
I have a cisco 3560 8 port switch. I really would lime to have the webinterface enabled. So i downloaded the archive from cisco. I extracted the archive to the flash of the switch. After rebooting the device everythings looks fine, but the html folder is a subfolder. It looks something like this: flash:c3560.../htmlI my understanding to enable the webinterface the html folder should be here flash:htmlHow do i move the html folder from the subfolder to the root?
View 1 Replies
View Related
May 3, 2013
We have a problem with a Cisco 1400 Bridge. This equipment can not bridge to the other root or not root mode. I can see a message "Interface Dot11Radio0 Radio transmit power out of range" and the MAC Address of Dot11Radio0 appears with 0000.0000.0000.I set the local power to 18 but the MAC Address is still in 0000.0000.0000.
View 1 Replies
View Related
Jul 18, 2011
Any working configuration between two BR1310's in Root/Non-root mode? The documentation is vary vague and i can't find anything more secure than WEP. Is it possible to use WPA with radius authentication?
View 1 Replies
View Related
Apr 24, 2012
Can I associate the non-root bridge model 1310 to the root bridge model 1400? Is there any problems on the configuration I need to be aware of?
View 7 Replies
View Related
May 29, 2012
i have a 3560 cisco switch that supports PVST+ and another switch wich supports just STP, can i use these together? if yes, is there any special configuration ?
View 2 Replies
View Related
Jan 23, 2013
Currently I'm with a pure Cisco shop, running every LAN Switched infrastructure (even in the HQ datacenter) with PVST+, I'm noticing in the documentation I've read and labs I've created that RSTP is... great, and I've observed that even the uplinkfast functionality seems to be build in by just enabling rapid-pvst. Of course I'll propose a migration plan, document the network, diagram it entirely and provide effective steps to implement the change, but that's assumed from any get'go.
View 1 Replies
View Related
Aug 30, 2011
Our customer use catalyst switch that spanning tree be PVST+ mode.I take SG300 connect with this catalyst switch.Does it support ?If it support,how to config on SG 300 ?
View 1 Replies
View Related
Feb 3, 2013
I'm trying to get a catalyst going for remote management using cisco network assistant.I've basically, enabled telnet;
enable conf t line vty 0 15 password {password}
login
exit
gave it an IP;
int vlan1 ip address {IP} {Subnet}
no shutdown
exit
[code]...
and write mem to save it all. I can ping, telnet and access cisco network assistant from inside the network perfectly. But the problem I'm having is accessing it from outside, can't even ping the device. I can ssh to other servers behind the network just fine. There is no firewall in place at the moment, the provider's drop is plugged in gige port 1?
View 3 Replies
View Related
Dec 27, 2009
In default mode the ASA 5505 is setup with two Vlan's, one inside and one outside. Vlan1 is the default inside VLan, with IP 192.168.1.1. I would like to change the subnet of Vlan1 tot 192.168.10.1, but when I do, no Ethernet port is assigned to Vlan1 anymore (was 0/1 - 0/7). What I have done is;
#config t
(config)#interface vlan 1
(config)#ip address 192.168.10.1 255.255.255.0
But after that, no Ethernet port is within Vlan1, so I tried the following to assign one (port 0/1);
#config t
(config)#interface 0/1
(config)#switchport access vlan 1
(config)#no shut
But nothing happends when monitoring (#show run) interface 0/1 (no Vlan assigned)
View 6 Replies
View Related
Nov 13, 2012
I have the following topology:
2x 877 routers, one interface from each router (port Fa0 which belongs to the router internal switch) is connected to the 2960 switch, the switch himself configured with default settings, flat with one v LAN.
I have configured HSRP in the following manner: router A is 10.0.0.2, router B is 10.0.0.3, virtual IP is 10.0.0.1, take note that the HSRP configuration along with the IP address are configured on vlan1 interface.
Now when i connect a PC to the switch with static IP (10.0.0.4) and trying to ping 10.0.0.1 I'm not getting replies. i see on the PC, using wire shark, the icmp request goes out but on the primary router (and also on the backup) i can't see the icmp request (using debug ip icmp).
this behavior happens only when the HSRP is configured on interface vlan1, when configuring the same configuration on Fa4 (which is WAN interface) everything works fine.
View 4 Replies
View Related
