长距离链路上的 STP 环路问题

网络工程 思科 转变 生成树 环形
2021-07-12 13:23:29

我通过我们的 ISP 网络在西海岸到东成本数据中心之间建立了长距离连接,如下图所示(BSN=Boston,PHX=Phoenix)

在此处输入图片说明

现在,当 ISP-A 或 ISP-B 在此期间进行任何维护时,PHX-SW1 交换机将接口置于 LOOP*(ofc,因为在 ISP 关闭期间缺少 BPDU,但好奇为什么它认为它的环路并试图保护链路?有什么吗?我应该做长距离 STP 调谐吗?)

PHX-SW1-配置:

interface Ethernet1/1
  switchport mode trunk
  switchport trunk allowed vlan 4

这是 ISP-A 宕机时的情况

Interface        Role Sts Cost      Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Eth1/1           Root BKN*4         128.1    P2p *LOOP_Inc
Eth1/2           Root FWD 4         128.2    P2p 
Eth1/3           Altn BLK 4         128.3    P2p 
Eth1/4           Desg FWD 4         128.4    P2p 

PHX-SW1# 2021 Aug 31 21:02:10 PHX-SW1 %$ VDC-1 %$ %STP-2-LOOPGUARD_BLOCK: Loop guard blocking port Ethernet1/1 on VLAN0004.

当 ISP-A 启动时,它会解除对接口的阻止并且一切恢复正常。

更新 - 1

BSN-SW1并且BSN-SW2vPC

BSN-SW1

BSN-SW1# show spanning-tree vlan 4

VLAN0004
  Spanning tree enabled protocol rstp
  Root ID    Priority    4100
             Address     0023.04ee.be01
             This bridge is the root
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    4100   (priority 4096 sys-id-ext 4)
             Address     0023.04ee.be01
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

Interface        Role Sts Cost      Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Po999            Root FWD 4         128.5094 (vPC peer-link) Network P2p 
Eth1/1           Desg FWD 4         128.1    P2p 
Eth1/2           Desg FWD 4         128.2    P2p 

BSN-SW2

BSN-SW2# show spanning-tree vlan 4

VLAN0004
  Spanning tree enabled protocol rstp
  Root ID    Priority    4100
             Address     0023.04ee.be01
             This bridge is the root
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    4100   (priority 4096 sys-id-ext 4)
             Address     0023.04ee.be01
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

Interface        Role Sts Cost      Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Po999            Desg FWD 4         128.5094 (vPC peer-link) Network P2p 
Eth1/1           Desg FWD 4         128.1    P2p 
Eth1/2           Desg FWD 4         128.2    P2p 

PHX-SW1

PHX-SW1# show spanning-tree vlan 4

VLAN0004
  Spanning tree enabled protocol rstp
  Root ID    Priority    4100
             Address     0023.04ee.be01
             Cost        4
             Port        1 (Ethernet1/1)
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    32772  (priority 32768 sys-id-ext 4)
             Address     5254.0018.7292
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

Interface        Role Sts Cost      Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Eth1/1           Root FWD 4         128.1    P2p 
Eth1/2           Altn BLK 4         128.2    P2p 
Eth1/3           Altn BLK 4         128.3    P2p 
Eth1/4           Desg FWD 4         128.4    P2p 

PHX-SW2

PHX-SW2# show spanning-tree vlan 4

VLAN0004
  Spanning tree enabled protocol rstp
  Root ID    Priority    4100
             Address     0023.04ee.be01
             Cost        4
             Port        1 (Ethernet1/1)
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    32772  (priority 32768 sys-id-ext 4)
             Address     5254.0008.b08b
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

Interface        Role Sts Cost      Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Eth1/1           Root FWD 4         128.1    P2p 
Eth1/2           Desg FWD 4         128.2    P2p 
Eth1/3           Desg FWD 4         128.3    P2p 
1个回答

当链路状态(启动/关闭)不能反映实际的 L2 连接时,xSTP 不是一个好的选择。

您的图表显示了跨不同 ISP 的 BSN-1 和 PHX-1 之间的 L2 连接。由于这不太可能,您似乎在那里进行了一些 L2 隧道(VPN?)。当连接丢失时,隧道可能会隐藏实际的链接状态,至少在一段时间内是这样。

您应该考虑切换到不需要 xSTP 的路由 L3 链路来消除网桥环路。假设您在位置之间使用 VPN,路由器之间的 OSPF 应该提供更可靠的链接状态和路由传播。