Got it

An interesting case in MSTP LAB

Latest reply: Jul 18, 2020 19:33:14 721 10 3 0 0

Hi everyone!


I'm trying to build a simple lab about Multiple Spanning Tree Protocol, and I have found something interesting. 


The lab topology is given as: 


Simple Layer 2 Topology


In this lab, I need to load balance the traffic of vlan 2 and vlan 3 over SW1, SW3 and SW2,SW3 links, respectively.

So, I have created two instance, the first is mapped to vlan 2, and the second one mapped to vlan 3. In instance 1, SW1 is the root, and SW2 is the secondary root. In instance 2, Sw2 is the root, and SW1 is the secondary root.


What should happen based on my understanding of MSTP is as follow:


1- PC1, the member of vlan 2, will send a udp broadcast message.

2- SW3 will encapsulate this braodcast messge by vlan id 2.

3- SW3 will forward the broadcast message based on the vlan id added to it in the previous step.

4- SW3 will find that the link between SW2 and SW3 is bloked based on the stp instance one, so the broadcast packet will be forwarded through the other link.


At a the end, the link between SW2 and SW3 should never has a packet encapsulated by vlan id 2 until the primary link between SW3 and SW1 fail. But, when I made a test to the network, I found just one packet from vlan 2 in this bloked link. The loop doesn't occure, but I need to know if this is normal or a simulator problem.


Vlan 2 packed in a blocked link




Very interesting.
View more
  • x
  • convention:

Hi, 

 It's normal. The UDP broadcast packet doesn't forward out from the interface g0/0/1 on SW3. The packet you captured is forwarded out from the g0/0/2 on SW3. The traffic path as the picture below draws,

path


View more
  • x
  • convention:

Kerracan
Kerracan Created Jul 14, 2020 08:47:42 (0) (0)
Yeah I wasn't sure which port at which switch exactly forward the packet. So, SW2 will forward the packet out of its g0/0/1 due to the interface port role (Designated Port), and SW3 will discard it due to the interface port role (ALT Port).
Thanks @chenhui  
BTW, you can block the traffic from the G0/0/2 on SW2 to verify the conclusion.
View more
  • x
  • convention:

Kerracan
Kerracan Created Jul 14, 2020 08:59:12 (0) (0)
I did shutdown int g0/0/2 of SW2, and performed the test once again, but the result is the same, we still have the vlan 2 packet in the blocked link, and the administratively shutdown link has no packets of course.  
Hi Kerracan,
You just configured it wrong way. No more physical loop existing while you shut down the interface G0/0/2 of SW2, which means the MSTP wouldn't block the interface G0/0/1 of SW3.
To verify this scenario, just configure L2 ACL on SW2 and traffic filter on the G0/0/1 of SW2 to call of the ACL. Kindly refer the example below,
#
acl number 4001
rule 5 deny source-mac 5489-980d-743c
#
interface GigabitEthernet0/0/1
traffic-filter outbound acl 4001
#
View more
  • x
  • convention:

Kerracan
Kerracan Created Jul 15, 2020 06:20:14 (0) (0)
Thanks, I was drunk  
Excellent
View more
  • x
  • convention:

An interesting case in MSTP LAB-3371113-1
View more
  • x
  • convention:

Great I have to analice this lab
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.