× NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Orbi WiFi 7 RBE973
Reply

Loop detection and prevention

4uba
Aspirant

Loop detection and prevention

Hello, Netgear Community.

 

This weekend I have not time to relax and enjoy my beer. Instead I was spent time in Server room with my lovely "roommates" 2x S3300 and 4x GS752TP.

 

I spent few long hours before I found, that I old lady plug one VoIP-phone two times in my switch (using wall plugs in her office). So it was funny time, but I do not want it to happen again! 🙂

 

Image to clarify:

 

I have activated RSTP at these switches, but this is not helped my to prevent this loop.

So, when I got call from stuff about the problem, the broadcast storm had fully frezed all processes in the networks (servers, switches, wlan, routers, all). So I even have not had any syslog. Anyway, after the time, I found this port and disabled it.

 

But, the question - Is there any mechanismes to prevent such loops and/or to notify my about such even? Could you please share you experience and advise me please!

 

Have a nice day.

Igor

Model: GS752TP|ProSAFE 48-port PoE Smart Switch with 8 PoE+-port, S3300-52X-PoE+ (GS752TXP)|ProSAFE 48-port Stackable Smart Switches with PoE+
Message 1 of 7

Accepted Solutions
Hopchen
Prodigy

Re: Loop detection and prevention

Hi,

 

Sorry about the beer 🙂

 

Just turning on RSTP on its own is likely not hepling because the phone does not support spanning tree. That is pretty common that phones don't. When the switch ports (those the phone is connected to) are in "main STP mode" the spanning tree negotiation can't happen as the phone does not understand/support that. Main STP mode should be used between devices that understand and support spanning tree.

 

Leave RSTP enabled overall and can you then also please try to enable "Egde Mode" on those ports where the phone is connected? Go to: "STP" --> "CST Port Configuration"

 

Does that prevent the loop now?


Cheers

View solution in original post

Message 2 of 7

All Replies
Hopchen
Prodigy

Re: Loop detection and prevention

Hi,

 

Sorry about the beer 🙂

 

Just turning on RSTP on its own is likely not hepling because the phone does not support spanning tree. That is pretty common that phones don't. When the switch ports (those the phone is connected to) are in "main STP mode" the spanning tree negotiation can't happen as the phone does not understand/support that. Main STP mode should be used between devices that understand and support spanning tree.

 

Leave RSTP enabled overall and can you then also please try to enable "Egde Mode" on those ports where the phone is connected? Go to: "STP" --> "CST Port Configuration"

 

Does that prevent the loop now?


Cheers

Message 2 of 7
4uba
Aspirant

Re: Loop detection and prevention

Hi Hopchen,

 

Thanks for your answer.

 

I forgot to mention, that Eth port and PC port have different vlan. Thats why broadcast storm is performing.

 

Since, S3300 is working on production, so I cannot apply any changes without testing at the lab, so I took GS752TP and simulate my production network, I activated RSTP (that was enabled before on my S3300) and also I enabled "Fast link" (that was not configured before). After test - nothing changes.... few seconds and all ports are begining to receive 7-8Mbps of traffic.

 

Anyway, at S3300 is little bit different firmware, and it gives me possibily to active one more option - Auto Edge. Is that function, that you advice my to configure?

 

P.S. At GS752TP there is no Auto Edge option.

Proofs:

GS752TP

S3300

 

But on GS752TP there is Edge Port status. 

Proof:

 Have can I try to enable it on GS752TP?

 

Thanks a lot.

 

Igor

Message 3 of 7
Hopchen
Prodigy

Re: Loop detection and prevention

Hi,

 

Okay, so if "Auto Edge" is on then that is fine. The switch will detech itself edge devices. Fast link should be OK as well. The VLANs doesn't matter as RSTP does not care about the VLAN config.

 

However, the issue is likely the same as discussed here:
https://supportforums.cisco.com/discussion/10069336/spanning-tree-loop-through-ip-phone

It is a Cisco thread, but it seems to relate to your issue? It is quite interesting really.

 

Anywho, I am not sure your switch is capable of BPDU guard as they mention here?


Cheers

Message 4 of 7
4uba
Aspirant

Re: Loop detection and prevention

Hi again,

 

I would like to summarize my research...

 

As I previously mentioned, any changes after activation / de-activation Fast Link. Even when I changed it to Auto, in STP - CST Status - Edge Port status changes to True, but anyway storm is performing. So this feature does not help me till now.

 

But also I found one interesting regularity: when I plug phone`s eth port in switch port (lower port number, e.g. g4), and after I plug phone`s PC port in any higher port number (e.g. g5-g48) storm is not performing. Otherwise, if PC port has lower port number that eth port, storming as in Pirates of the Caribbean!!!

 

Yalink gives 80-90 Mbps storm.

Fanvil gives 7-8 Mbps storm.

 

I would like also note results of my research in this case:

1. When I plug eth port, and after plug pc port in lower port number - port up to 7 seconds stays at learning state.

2. After 5-7 seconds port is chaning at Forwarding state, Address tables is removing and storm is beginning (so I mean that ports are in state Forwarding both) - I cannot change it, since I have not BPDU Guard or BPDU filter functionality.

 

I`m not sure, that even BPDU guard will help me. I will try to find M-series switch to proove it.

 

It`s not the end.

 

Igor

Message 5 of 7
4uba
Aspirant

Re: Loop detection and prevention

Guys,

 

I found, that in S3300 datasheet marked, that BPDU Guard is present in S3300 and even in GS752TP.

Proof:

 

Could you please tell my, how to enable this functionality (CLI or GUI does not matter)!!!

Cause I dont have any buttons in config menu. Proof:

Thanks in advance!

 

Igor

Message 6 of 7
Hopchen
Prodigy

Re: Loop detection and prevention

Hi, 

 

If the datasheet specifies that it has BPDU Guard, then it probably does. I assume it is just enabled and non-configurable (therefore not visible to you). I would not know enough about spanning tree to determine whether the issue of your phones really is down to BPDU Guard or not.

 

I suggest you reach out to support in this one, to see what they say. 

 

Cheers

Message 7 of 7
Top Contributors
Discussion stats
  • 6 replies
  • 22615 views
  • 1 kudo
  • 2 in conversation
Announcements