NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
BE9200 sending BPDU out wan port
Device is sending put BPDU on the wan port. This is causing the service provider switch to put the port into blocking state as they are not expecting an access port to receive BPDUs. Is there a setting to turn this off.
19 Replies
Replies have been turned off for this discussion
How are you determining this is coming from the router?
What is BPDU?
RS###?What Firmware version is currently loaded?
What is the Mfr and model# of the Internet Service Providers modem/ONT the NG router is connected too?
Be sure your using a good quality LAN cable between the modem and router. CAT6A STP is recommended.1. BE9200 isn't a model. What device do you have?
2. BPDU is mainly a feature of managed switches. Are you using a managed switch?
3. How is your network setup (The gateway/switches/router)?
4. I've never seen bpdu on a consumer device. I'd be suspicious of the other devices on your network or whatever you have wired into the wan portThe device is model RS280. The sticker on the bottom says BE9200 model rs280. This router is attached to a Cisco switch. The port is configured as an access port. I know it sent a BPDU because the Cisco switch reported that it received a BPDU.
*Nov 19 02:48:28.455: %SYS-5-CONFIG_I: Configured from console by console
*Nov 19 02:49:36.591: %SPANTREE-2-BLOCK_BPDUGUARD: Received BPDU on port Gi1/1 with BPDU Guard enabled. Disabling port.
*Nov 19 02:49:36.591: %PM-4-ERR_DISABLE: bpduguard error detected on Gi1/1, putting Gi1/1 in err-disable state
*Nov 19 02:49:54.699: %SYS-5-CONFIG_I: Configured from console by console
*Nov 19 02:50:25.571: %SYS-5-CONFIG_I: Configured from console by console
*Nov 19 02:50:38.063: %SYS-5-CONFIG_I: Configured from console by console
*Nov 19 02:50:42.643: %SPANTREE-2-ROOTGUARD_BLOCK: Root guard blocking port GigabitEthernet1/1 on VLAN3101.
*Nov 19 02:55:47.427: %SYS-5-CONFIG_I: Configured from console by consoleWonder if the bpdu is misinterpreting something. Might try disabling it on that port.
I was in the same situation.
RS300, tried multiple 6A STP cables. Only cable was from WAN to Router, nothing in between, no other devices connected.
Started out on FW 1.0.0.38 and everything was working fine for a month. Flashed to 1.0.0.50 and the WAN port had no link light. Tried hard resetting the RS300 Multiple times, but it was reproducible. As soon as I went to .38 the link light came on, flashed to .50 and link light went off. Ended up flashing back to .38 and wait for next release.
V 1.0.0.60 came out , Hard reset modem, flashed from .38 to .60 and WAN link light went out. But this time reverting to .38 I could not get it working again, during all flashed, I do not restore any setting in between flashed but it doesn't matter, as soon as it had a certain FW there was no WAN link.
I called my provider because now even reverting to .38 would not work, Long story short they said the logs said was triggering the BPDU Guard on their edge device and it was disabling the port. they even told me the times i flashed my FW exactly. I asked if there was any combability with them and any router. They wanted to know if there was any devices between my router and their equipment which was no. They asked if I had a RS300 and they said that is the only model they had ever gotten calls on. They are a fairly large fiber provider.
My solution was I had to buy another manufacturer WIFI7 router as I needed to work.
Thanks klee608 hexcei for reaching out to us and thanks FURRYe38 for tagging me.
I'm not aware that we send BPDU packets or even layer 2 protocol packets (except for ARP) from the Internet port, we will look into it.
In the mean time, klee608, appreciate it if you can send me your wireshark capture. Thank you.
Here are two wireshark captures. One of the capture has bpduguard disabled on the cisco switch and the other one has bpdguard enable.
I cannot upload .pcapng files. Here are links to the files.
Thanks for the info. I'm pretty close to following your footsteps.
OK, we can see the issue. We will have trial firmware with the fix shortly. If you would like to give it a try, I will PM you a link to download the trial firmware when it's ready. Thank you.
