[AFMUG] Switch expert help/advice

[Sterling Jacobson]

Any of you guys work with switches a lot?

I use banks of switches in my fiber, set up per neighborhood.

But really they are all linked via fiber so it's pretty much like a datacenter.

I'm using a few MPLS/VPLS tunnels to the switch banks.

I'm having a real hard time tracking down a loop issue though.

It's related to MikroTik lovely change in version 6.38 for STP/RSTP bridge 
stuff.

My problem is with an IBM switch I don't know very well.

I suspect I have settings wrong for STP/RSTP etc.

The switches are a simple configuration of VLAN 1/default for customer traffic, 
then another VLAN for management from the device at their house/MDU.

I pull out the VLAN management at the mikrotik and bridge it with an area wide 
L2 MPLS network.

My problem is the IBM switches keep shutting down access to customer data or 
management or the other switches they are connected to.
The crude method of recovery is reboot the switch.

At the 'head' of the VPLS network I use an EOIP tunnel to a hosted mikrotik 
that hosts the Dude and a few other management VM's on that layer2 network.

I'm regretting I did that and didn't create a more sophisticated routed 
management network.

But the hosted mikrotik is complaining of loop packets and sometimes just goes 
wild and shuts down it's EOIP connecting interface for 60 seconds.
I can't seem to find a way to tell it to NOT do that either, seems like it's 
built in to 6.38 no matter what Loop Protection I turn off or STP I disable.
It's not like it's a lot of traffic, it's just seeing some BPDU or STP type 
packets and killing itself.

What is the best practice for switches regarding RSTP/PVRST BDPU guards and STP 
root paths etc?

The switches typically have two uplink ports going to the router or another 
switch, the rest are customer facing ports.

Re: [AFMUG] Switch expert help/advice

[George Skorup]

6.38.1? They like to fix stuff and not tell anyone. And then break more 
stuff and still not tell anyone.


I don't expect 6.38.x to be stable enough for production use for at 
least a month. Maybe two. Or three.


On 1/17/2017 10:33 PM, Sterling Jacobson wrote:

Any of you guys work with switches a lot?

I use banks of switches in my fiber, set up per neighborhood.

But really they are all linked via fiber so it's pretty much like a datacenter.

I'm using a few MPLS/VPLS tunnels to the switch banks.

I'm having a real hard time tracking down a loop issue though.

It's related to MikroTik lovely change in version 6.38 for STP/RSTP bridge 
stuff.

My problem is with an IBM switch I don't know very well.

I suspect I have settings wrong for STP/RSTP etc.

The switches are a simple configuration of VLAN 1/default for customer traffic, 
then another VLAN for management from the device at their house/MDU.

I pull out the VLAN management at the mikrotik and bridge it with an area wide 
L2 MPLS network.

My problem is the IBM switches keep shutting down access to customer data or 
management or the other switches they are connected to.
The crude method of recovery is reboot the switch.

At the 'head' of the VPLS network I use an EOIP tunnel to a hosted mikrotik 
that hosts the Dude and a few other management VM's on that layer2 network.

I'm regretting I did that and didn't create a more sophisticated routed 
management network.

But the hosted mikrotik is complaining of loop packets and sometimes just goes 
wild and shuts down it's EOIP connecting interface for 60 seconds.
I can't seem to find a way to tell it to NOT do that either, seems like it's 
built in to 6.38 no matter what Loop Protection I turn off or STP I disable.
It's not like it's a lot of traffic, it's just seeing some BPDU or STP type 
packets and killing itself.

What is the best practice for switches regarding RSTP/PVRST BDPU guards and STP 
root paths etc?

The switches typically have two uplink ports going to the router or another 
switch, the rest are customer facing ports.

Re: [AFMUG] Switch expert help/advice

[Gino Villarini]

Why are you using stp?

On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"



Gino Villarini


President
Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968

[cid:aeronet-logo_310cfc3e-6691-4f69-bd49-b37b834b9238.png]

 wrote:

>Any of you guys work with switches a lot?
>
>I use banks of switches in my fiber, set up per neighborhood.
>
>But really they are all linked via fiber so it's pretty much like a
>datacenter.
>
>I'm using a few MPLS/VPLS tunnels to the switch banks.
>
>I'm having a real hard time tracking down a loop issue though.
>
>It's related to MikroTik lovely change in version 6.38 for STP/RSTP
>bridge stuff.
>
>My problem is with an IBM switch I don't know very well.
>
>I suspect I have settings wrong for STP/RSTP etc.
>
>The switches are a simple configuration of VLAN 1/default for customer
>traffic, then another VLAN for management from the device at their
>house/MDU.
>
>I pull out the VLAN management at the mikrotik and bridge it with an area
>wide L2 MPLS network.
>
>My problem is the IBM switches keep shutting down access to customer data
>or management or the other switches they are connected to.
>The crude method of recovery is reboot the switch.
>
>At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
>mikrotik that hosts the Dude and a few other management VM's on that
>layer2 network.
>
>I'm regretting I did that and didn't create a more sophisticated routed
>management network.
>
>But the hosted mikrotik is complaining of loop packets and sometimes just
>goes wild and shuts down it's EOIP connecting interface for 60 seconds.
>I can't seem to find a way to tell it to NOT do that either, seems like
>it's built in to 6.38 no matter what Loop Protection I turn off or STP I
>disable.
>It's not like it's a lot of traffic, it's just seeing some BPDU or STP
>type packets and killing itself.
>
>What is the best practice for switches regarding RSTP/PVRST BDPU guards
>and STP root paths etc?
>
>The switches typically have two uplink ports going to the router or
>another switch, the rest are customer facing ports.

Re: [AFMUG] Switch expert help/advice

[Jon Langeler]

What's the device logs saying? Mikrotik will say which port it's detecting a 
loop on. Hopefully the same with your other devices. I've seen faulty Mikrotik 
equipment cause this.

Jon Langeler
Michwave Technologies, Inc.


> On Jan 17, 2017, at 11:33 PM, Sterling Jacobson  wrote:
> 
> Any of you guys work with switches a lot?
> 
> I use banks of switches in my fiber, set up per neighborhood.
> 
> But really they are all linked via fiber so it's pretty much like a 
> datacenter.
> 
> I'm using a few MPLS/VPLS tunnels to the switch banks.
> 
> I'm having a real hard time tracking down a loop issue though.
> 
> It's related to MikroTik lovely change in version 6.38 for STP/RSTP bridge 
> stuff.
> 
> My problem is with an IBM switch I don't know very well.
> 
> I suspect I have settings wrong for STP/RSTP etc.
> 
> The switches are a simple configuration of VLAN 1/default for customer 
> traffic, then another VLAN for management from the device at their house/MDU.
> 
> I pull out the VLAN management at the mikrotik and bridge it with an area 
> wide L2 MPLS network.
> 
> My problem is the IBM switches keep shutting down access to customer data or 
> management or the other switches they are connected to.
> The crude method of recovery is reboot the switch.
> 
> At the 'head' of the VPLS network I use an EOIP tunnel to a hosted mikrotik 
> that hosts the Dude and a few other management VM's on that layer2 network.
> 
> I'm regretting I did that and didn't create a more sophisticated routed 
> management network.
> 
> But the hosted mikrotik is complaining of loop packets and sometimes just 
> goes wild and shuts down it's EOIP connecting interface for 60 seconds.
> I can't seem to find a way to tell it to NOT do that either, seems like it's 
> built in to 6.38 no matter what Loop Protection I turn off or STP I disable.
> It's not like it's a lot of traffic, it's just seeing some BPDU or STP type 
> packets and killing itself.
> 
> What is the best practice for switches regarding RSTP/PVRST BDPU guards and 
> STP root paths etc?
> 
> The switches typically have two uplink ports going to the router or another 
> switch, the rest are customer facing ports.

Re: [AFMUG] Switch expert help/advice

[Jason McKemie]

6.38 (I think?) had some changes with STP/rSTP and VLANs. I wonder if this
doesn't have something to do with it.

On Tuesday, January 17, 2017, Sterling Jacobson 
wrote:

> Any of you guys work with switches a lot?
>
> I use banks of switches in my fiber, set up per neighborhood.
>
> But really they are all linked via fiber so it's pretty much like a
> datacenter.
>
> I'm using a few MPLS/VPLS tunnels to the switch banks.
>
> I'm having a real hard time tracking down a loop issue though.
>
> It's related to MikroTik lovely change in version 6.38 for STP/RSTP bridge
> stuff.
>
> My problem is with an IBM switch I don't know very well.
>
> I suspect I have settings wrong for STP/RSTP etc.
>
> The switches are a simple configuration of VLAN 1/default for customer
> traffic, then another VLAN for management from the device at their
> house/MDU.
>
> I pull out the VLAN management at the mikrotik and bridge it with an area
> wide L2 MPLS network.
>
> My problem is the IBM switches keep shutting down access to customer data
> or management or the other switches they are connected to.
> The crude method of recovery is reboot the switch.
>
> At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
> mikrotik that hosts the Dude and a few other management VM's on that layer2
> network.
>
> I'm regretting I did that and didn't create a more sophisticated routed
> management network.
>
> But the hosted mikrotik is complaining of loop packets and sometimes just
> goes wild and shuts down it's EOIP connecting interface for 60 seconds.
> I can't seem to find a way to tell it to NOT do that either, seems like
> it's built in to 6.38 no matter what Loop Protection I turn off or STP I
> disable.
> It's not like it's a lot of traffic, it's just seeing some BPDU or STP
> type packets and killing itself.
>
> What is the best practice for switches regarding RSTP/PVRST BDPU guards
> and STP root paths etc?
>
> The switches typically have two uplink ports going to the router or
> another switch, the rest are customer facing ports.
>

Re: [AFMUG] Switch expert help/advice

[Sterling Jacobson]

Don't all switches use some form of STP/RSTP Gino?

I'm talking about best practices for a switch bank really.

Do I set STP priority number lower than the default on the switch for the ports 
going to other switches?

And what is the term or feature that means ignore STP type packets from that 
port (customer ports).

I think I'm getting STP type topology changes every time a downstream customer 
port has a up/down change etc.

I don't want those.

From: Af [mailto:af-boun...@afmug.com] On Behalf Of Gino Villarini
Sent: Wednesday, January 18, 2017 2:00 AM
To: af@afmug.com
Subject: Re: [AFMUG] Switch expert help/advice

Why are you using stp?

On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"



Gino Villarini

President

Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968


[cid:image001.png@01D2718B.144BF200]
mailto:af-boun...@afmug.com%20on%20behalf%20of%20sterl...@avative.net>>
 wrote:

>Any of you guys work with switches a lot?
>
>I use banks of switches in my fiber, set up per neighborhood.
>
>But really they are all linked via fiber so it's pretty much like a
>datacenter.
>
>I'm using a few MPLS/VPLS tunnels to the switch banks.
>
>I'm having a real hard time tracking down a loop issue though.
>
>It's related to MikroTik lovely change in version 6.38 for STP/RSTP
>bridge stuff.
>
>My problem is with an IBM switch I don't know very well.
>
>I suspect I have settings wrong for STP/RSTP etc.
>
>The switches are a simple configuration of VLAN 1/default for customer
>traffic, then another VLAN for management from the device at their
>house/MDU.
>
>I pull out the VLAN management at the mikrotik and bridge it with an area
>wide L2 MPLS network.
>
>My problem is the IBM switches keep shutting down access to customer data
>or management or the other switches they are connected to.
>The crude method of recovery is reboot the switch.
>
>At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
>mikrotik that hosts the Dude and a few other management VM's on that
>layer2 network.
>
>I'm regretting I did that and didn't create a more sophisticated routed
>management network.
>
>But the hosted mikrotik is complaining of loop packets and sometimes just
>goes wild and shuts down it's EOIP connecting interface for 60 seconds.
>I can't seem to find a way to tell it to NOT do that either, seems like
>it's built in to 6.38 no matter what Loop Protection I turn off or STP I
>disable.
>It's not like it's a lot of traffic, it's just seeing some BPDU or STP
>type packets and killing itself.
>
>What is the best practice for switches regarding RSTP/PVRST BDPU guards
>and STP root paths etc?
>
>The switches typically have two uplink ports going to the router or
>another switch, the rest are customer facing ports.

Re: [AFMUG] Switch expert help/advice

[Steve Utick]

You're probably talking about bpdufilter:  spanning-tree bpdufilter enable
(Results port to not participate in STP, loops may occur)

There is also bpduguard:
spanning-tree bpduguard enable (Puts port in errdisable upon receiving any
bpdu)


On Wed, Jan 18, 2017 at 1:02 PM, Sterling Jacobson 
wrote:

> Don’t all switches use some form of STP/RSTP Gino?
>
>
>
> I’m talking about best practices for a switch bank really.
>
>
>
> Do I set STP priority number lower than the default on the switch for the
> ports going to other switches?
>
>
>
> And what is the term or feature that means ignore STP type packets from
> that port (customer ports).
>
>
>
> I think I’m getting STP type topology changes every time a downstream
> customer port has a up/down change etc.
>
>
>
> I don’t want those.
>
>
>
> *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Gino Villarini
> *Sent:* Wednesday, January 18, 2017 2:00 AM
> *To:* af@afmug.com
> *Subject:* Re: [AFMUG] Switch expert help/advice
>
>
>
> Why are you using stp?
>
> On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"
>
>
>
> *Gino Villarini*
>
> President
>
> Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968
>
> [image: cid:image001.png@01D2718B.144BF200]
>
>  > wrote:
>
> >Any of you guys work with switches a lot?
> >
> >I use banks of switches in my fiber, set up per neighborhood.
> >
> >But really they are all linked via fiber so it's pretty much like a
> >datacenter.
> >
> >I'm using a few MPLS/VPLS tunnels to the switch banks.
> >
> >I'm having a real hard time tracking down a loop issue though.
> >
> >It's related to MikroTik lovely change in version 6.38 for STP/RSTP
> >bridge stuff.
> >
> >My problem is with an IBM switch I don't know very well.
> >
> >I suspect I have settings wrong for STP/RSTP etc.
> >
> >The switches are a simple configuration of VLAN 1/default for customer
> >traffic, then another VLAN for management from the device at their
> >house/MDU.
> >
> >I pull out the VLAN management at the mikrotik and bridge it with an area
> >wide L2 MPLS network.
> >
> >My problem is the IBM switches keep shutting down access to customer data
> >or management or the other switches they are connected to.
> >The crude method of recovery is reboot the switch.
> >
> >At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
> >mikrotik that hosts the Dude and a few other management VM's on that
> >layer2 network.
> >
> >I'm regretting I did that and didn't create a more sophisticated routed
> >management network.
> >
> >But the hosted mikrotik is complaining of loop packets and sometimes just
> >goes wild and shuts down it's EOIP connecting interface for 60 seconds.
> >I can't seem to find a way to tell it to NOT do that either, seems like
> >it's built in to 6.38 no matter what Loop Protection I turn off or STP I
> >disable.
> >It's not like it's a lot of traffic, it's just seeing some BPDU or STP
> >type packets and killing itself.
> >
> >What is the best practice for switches regarding RSTP/PVRST BDPU guards
> >and STP root paths etc?
> >
> >The switches typically have two uplink ports going to the router or
> >another switch, the rest are customer facing ports.
>

Re: [AFMUG] Switch expert help/advice

[Gino Villarini]

If you don’t have rings, you don’t need stp.. You can disable it…

From: Af mailto:af-boun...@afmug.com>> on behalf of 
Sterling Jacobson mailto:sterl...@avative.net>>
Reply-To: "af@afmug.com<mailto:af@afmug.com>" 
mailto:af@afmug.com>>
Date: Wednesday, January 18, 2017 at 4:02 PM
To: "af@afmug.com<mailto:af@afmug.com>" mailto:af@afmug.com>>
Subject: Re: [AFMUG] Switch expert help/advice

Don’t all switches use some form of STP/RSTP Gino?

I’m talking about best practices for a switch bank really.

Do I set STP priority number lower than the default on the switch for the ports 
going to other switches?

And what is the term or feature that means ignore STP type packets from that 
port (customer ports).

I think I’m getting STP type topology changes every time a downstream customer 
port has a up/down change etc.

I don’t want those.

From: Af [mailto:af-boun...@afmug.com] On Behalf Of Gino Villarini
Sent: Wednesday, January 18, 2017 2:00 AM
To: af@afmug.com<mailto:af@afmug.com>
Subject: Re: [AFMUG] Switch expert help/advice

Why are you using stp?

On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"



Gino Villarini

President

Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968


[cid:image001.png@01D2718B.144BF200]
mailto:af-boun...@afmug.com%20on%20behalf%20of%20sterl...@avative.net>>
 wrote:

>Any of you guys work with switches a lot?
>
>I use banks of switches in my fiber, set up per neighborhood.
>
>But really they are all linked via fiber so it's pretty much like a
>datacenter.
>
>I'm using a few MPLS/VPLS tunnels to the switch banks.
>
>I'm having a real hard time tracking down a loop issue though.
>
>It's related to MikroTik lovely change in version 6.38 for STP/RSTP
>bridge stuff.
>
>My problem is with an IBM switch I don't know very well.
>
>I suspect I have settings wrong for STP/RSTP etc.
>
>The switches are a simple configuration of VLAN 1/default for customer
>traffic, then another VLAN for management from the device at their
>house/MDU.
>
>I pull out the VLAN management at the mikrotik and bridge it with an area
>wide L2 MPLS network.
>
>My problem is the IBM switches keep shutting down access to customer data
>or management or the other switches they are connected to.
>The crude method of recovery is reboot the switch.
>
>At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
>mikrotik that hosts the Dude and a few other management VM's on that
>layer2 network.
>
>I'm regretting I did that and didn't create a more sophisticated routed
>management network.
>
>But the hosted mikrotik is complaining of loop packets and sometimes just
>goes wild and shuts down it's EOIP connecting interface for 60 seconds.
>I can't seem to find a way to tell it to NOT do that either, seems like
>it's built in to 6.38 no matter what Loop Protection I turn off or STP I
>disable.
>It's not like it's a lot of traffic, it's just seeing some BPDU or STP
>type packets and killing itself.
>
>What is the best practice for switches regarding RSTP/PVRST BDPU guards
>and STP root paths etc?
>
>The switches typically have two uplink ports going to the router or
>another switch, the rest are customer facing ports.



Gino Villarini


President
Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968

[cid:aeronet-logo_310cfc3e-6691-4f69-bd49-b37b834b9238.png]

Re: [AFMUG] Switch expert help/advice

[Sterling Jacobson]

I don't want a customer to plug in our Ethernet to a switch without STP and 
have it spam our switch with packets.

Is that just Guard on the ports?

From: Af [mailto:af-boun...@afmug.com] On Behalf Of Gino Villarini
Sent: Wednesday, January 18, 2017 1:51 PM
To: af@afmug.com
Subject: Re: [AFMUG] Switch expert help/advice

If you don't have rings, you don't need stp.. You can disable it...

From: Af mailto:af-boun...@afmug.com>> on behalf of 
Sterling Jacobson mailto:sterl...@avative.net>>
Reply-To: "af@afmug.com<mailto:af@afmug.com>" 
mailto:af@afmug.com>>
Date: Wednesday, January 18, 2017 at 4:02 PM
To: "af@afmug.com<mailto:af@afmug.com>" mailto:af@afmug.com>>
Subject: Re: [AFMUG] Switch expert help/advice

Don't all switches use some form of STP/RSTP Gino?

I'm talking about best practices for a switch bank really.

Do I set STP priority number lower than the default on the switch for the ports 
going to other switches?

And what is the term or feature that means ignore STP type packets from that 
port (customer ports).

I think I'm getting STP type topology changes every time a downstream customer 
port has a up/down change etc.

I don't want those.

From: Af [mailto:af-boun...@afmug.com] On Behalf Of Gino Villarini
Sent: Wednesday, January 18, 2017 2:00 AM
To: af@afmug.com<mailto:af@afmug.com>
Subject: Re: [AFMUG] Switch expert help/advice

Why are you using stp?

On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"



Gino Villarini

President

Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968


[cid:image001.png@01D2718B.144BF200]
mailto:af-boun...@afmug.com%20on%20behalf%20of%20sterl...@avative.net>>
 wrote:

>Any of you guys work with switches a lot?
>
>I use banks of switches in my fiber, set up per neighborhood.
>
>But really they are all linked via fiber so it's pretty much like a
>datacenter.
>
>I'm using a few MPLS/VPLS tunnels to the switch banks.
>
>I'm having a real hard time tracking down a loop issue though.
>
>It's related to MikroTik lovely change in version 6.38 for STP/RSTP
>bridge stuff.
>
>My problem is with an IBM switch I don't know very well.
>
>I suspect I have settings wrong for STP/RSTP etc.
>
>The switches are a simple configuration of VLAN 1/default for customer
>traffic, then another VLAN for management from the device at their
>house/MDU.
>
>I pull out the VLAN management at the mikrotik and bridge it with an area
>wide L2 MPLS network.
>
>My problem is the IBM switches keep shutting down access to customer data
>or management or the other switches they are connected to.
>The crude method of recovery is reboot the switch.
>
>At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
>mikrotik that hosts the Dude and a few other management VM's on that
>layer2 network.
>
>I'm regretting I did that and didn't create a more sophisticated routed
>management network.
>
>But the hosted mikrotik is complaining of loop packets and sometimes just
>goes wild and shuts down it's EOIP connecting interface for 60 seconds.
>I can't seem to find a way to tell it to NOT do that either, seems like
>it's built in to 6.38 no matter what Loop Protection I turn off or STP I
>disable.
>It's not like it's a lot of traffic, it's just seeing some BPDU or STP
>type packets and killing itself.
>
>What is the best practice for switches regarding RSTP/PVRST BDPU guards
>and STP root paths etc?
>
>The switches typically have two uplink ports going to the router or
>another switch, the rest are customer facing ports.



Gino Villarini

President

Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968


[cid:image001.png@01D27194.9FB651B0]

Re: [AFMUG] Switch expert help/advice

[Gino Villarini]

Port isolation? Limit port to 1 mac?

From: Af mailto:af-boun...@afmug.com>> on behalf of 
Sterling Jacobson mailto:sterl...@avative.net>>
Reply-To: "af@afmug.com<mailto:af@afmug.com>" 
mailto:af@afmug.com>>
Date: Wednesday, January 18, 2017 at 5:10 PM
To: "af@afmug.com<mailto:af@afmug.com>" mailto:af@afmug.com>>
Subject: Re: [AFMUG] Switch expert help/advice

I don’t want a customer to plug in our Ethernet to a switch without STP and 
have it spam our switch with packets.

Is that just Guard on the ports?

From: Af [mailto:af-boun...@afmug.com] On Behalf Of Gino Villarini
Sent: Wednesday, January 18, 2017 1:51 PM
To: af@afmug.com<mailto:af@afmug.com>
Subject: Re: [AFMUG] Switch expert help/advice

If you don’t have rings, you don’t need stp.. You can disable it…

From: Af mailto:af-boun...@afmug.com>> on behalf of 
Sterling Jacobson mailto:sterl...@avative.net>>
Reply-To: "af@afmug.com<mailto:af@afmug.com>" 
mailto:af@afmug.com>>
Date: Wednesday, January 18, 2017 at 4:02 PM
To: "af@afmug.com<mailto:af@afmug.com>" mailto:af@afmug.com>>
Subject: Re: [AFMUG] Switch expert help/advice

Don’t all switches use some form of STP/RSTP Gino?

I’m talking about best practices for a switch bank really.

Do I set STP priority number lower than the default on the switch for the ports 
going to other switches?

And what is the term or feature that means ignore STP type packets from that 
port (customer ports).

I think I’m getting STP type topology changes every time a downstream customer 
port has a up/down change etc.

I don’t want those.

From: Af [mailto:af-boun...@afmug.com] On Behalf Of Gino Villarini
Sent: Wednesday, January 18, 2017 2:00 AM
To: af@afmug.com<mailto:af@afmug.com>
Subject: Re: [AFMUG] Switch expert help/advice

Why are you using stp?

On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"



Gino Villarini

President

Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968


[cid:image001.png@01D2718B.144BF200]
mailto:af-boun...@afmug.com%20on%20behalf%20of%20sterl...@avative.net>>
 wrote:

>Any of you guys work with switches a lot?
>
>I use banks of switches in my fiber, set up per neighborhood.
>
>But really they are all linked via fiber so it's pretty much like a
>datacenter.
>
>I'm using a few MPLS/VPLS tunnels to the switch banks.
>
>I'm having a real hard time tracking down a loop issue though.
>
>It's related to MikroTik lovely change in version 6.38 for STP/RSTP
>bridge stuff.
>
>My problem is with an IBM switch I don't know very well.
>
>I suspect I have settings wrong for STP/RSTP etc.
>
>The switches are a simple configuration of VLAN 1/default for customer
>traffic, then another VLAN for management from the device at their
>house/MDU.
>
>I pull out the VLAN management at the mikrotik and bridge it with an area
>wide L2 MPLS network.
>
>My problem is the IBM switches keep shutting down access to customer data
>or management or the other switches they are connected to.
>The crude method of recovery is reboot the switch.
>
>At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
>mikrotik that hosts the Dude and a few other management VM's on that
>layer2 network.
>
>I'm regretting I did that and didn't create a more sophisticated routed
>management network.
>
>But the hosted mikrotik is complaining of loop packets and sometimes just
>goes wild and shuts down it's EOIP connecting interface for 60 seconds.
>I can't seem to find a way to tell it to NOT do that either, seems like
>it's built in to 6.38 no matter what Loop Protection I turn off or STP I
>disable.
>It's not like it's a lot of traffic, it's just seeing some BPDU or STP
>type packets and killing itself.
>
>What is the best practice for switches regarding RSTP/PVRST BDPU guards
>and STP root paths etc?
>
>The switches typically have two uplink ports going to the router or
>another switch, the rest are customer facing ports.



Gino Villarini

President

Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968


[cid:image001.png@01D27194.9FB651B0]



Gino Villarini


President
Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968

[cid:aeronet-logo_310cfc3e-6691-4f69-bd49-b37b834b9238.png]

Re: [AFMUG] Switch expert help/advice

[Josh Baird]

In Cisco, this would be bpduguard.

On Wed, Jan 18, 2017 at 4:10 PM, Sterling Jacobson 
wrote:

> I don’t want a customer to plug in our Ethernet to a switch without STP
> and have it spam our switch with packets.
>
>
>
> Is that just Guard on the ports?
>
>
>
> *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Gino Villarini
> *Sent:* Wednesday, January 18, 2017 1:51 PM
> *To:* af@afmug.com
> *Subject:* Re: [AFMUG] Switch expert help/advice
>
>
>
> If you don’t have rings, you don’t need stp.. You can disable it…
>
>
>
> *From: *Af  on behalf of Sterling Jacobson <
> sterl...@avative.net>
> *Reply-To: *"af@afmug.com" 
> *Date: *Wednesday, January 18, 2017 at 4:02 PM
> *To: *"af@afmug.com" 
> *Subject: *Re: [AFMUG] Switch expert help/advice
>
>
>
> Don’t all switches use some form of STP/RSTP Gino?
>
>
>
> I’m talking about best practices for a switch bank really.
>
>
>
> Do I set STP priority number lower than the default on the switch for the
> ports going to other switches?
>
>
>
> And what is the term or feature that means ignore STP type packets from
> that port (customer ports).
>
>
>
> I think I’m getting STP type topology changes every time a downstream
> customer port has a up/down change etc.
>
>
>
> I don’t want those.
>
>
>
> *From:* Af [mailto:af-boun...@afmug.com ] *On
> Behalf Of *Gino Villarini
> *Sent:* Wednesday, January 18, 2017 2:00 AM
> *To:* af@afmug.com
> *Subject:* Re: [AFMUG] Switch expert help/advice
>
>
>
> Why are you using stp?
>
> On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"
>
>
>
> *Gino Villarini*
>
> President
>
> Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968
>
> [image: cid:image001.png@01D2718B.144BF200]
>
>  > wrote:
>
> >Any of you guys work with switches a lot?
> >
> >I use banks of switches in my fiber, set up per neighborhood.
> >
> >But really they are all linked via fiber so it's pretty much like a
> >datacenter.
> >
> >I'm using a few MPLS/VPLS tunnels to the switch banks.
> >
> >I'm having a real hard time tracking down a loop issue though.
> >
> >It's related to MikroTik lovely change in version 6.38 for STP/RSTP
> >bridge stuff.
> >
> >My problem is with an IBM switch I don't know very well.
> >
> >I suspect I have settings wrong for STP/RSTP etc.
> >
> >The switches are a simple configuration of VLAN 1/default for customer
> >traffic, then another VLAN for management from the device at their
> >house/MDU.
> >
> >I pull out the VLAN management at the mikrotik and bridge it with an area
> >wide L2 MPLS network.
> >
> >My problem is the IBM switches keep shutting down access to customer data
> >or management or the other switches they are connected to.
> >The crude method of recovery is reboot the switch.
> >
> >At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
> >mikrotik that hosts the Dude and a few other management VM's on that
> >layer2 network.
> >
> >I'm regretting I did that and didn't create a more sophisticated routed
> >management network.
> >
> >But the hosted mikrotik is complaining of loop packets and sometimes just
> >goes wild and shuts down it's EOIP connecting interface for 60 seconds.
> >I can't seem to find a way to tell it to NOT do that either, seems like
> >it's built in to 6.38 no matter what Loop Protection I turn off or STP I
> >disable.
> >It's not like it's a lot of traffic, it's just seeing some BPDU or STP
> >type packets and killing itself.
> >
> >What is the best practice for switches regarding RSTP/PVRST BDPU guards
> >and STP root paths etc?
> >
> >The switches typically have two uplink ports going to the router or
> >another switch, the rest are customer facing ports.
>
>
>
> *Gino Villarini*
>
> President
>
> Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968
>
>

Re: [AFMUG] Switch expert help/advice

[Seth Mattinen]

On 1/18/17 13:33, Josh Baird wrote:

In Cisco, this would be bpduguard.



Dare I suggest this is the perfect example of a use case for a proper 
metro ethernet switch with UNI/NNI port profiles.


~Seth

Re: [AFMUG] Switch expert help/advice

[Carl Peterson]

I'm in the process of deploying something similar for our wired MDUs.  Each
MDU gets an SVLAN and each customer gets a CVLAN so there is a unique
CVLAN.SVLAN for each customer.  The SVLANs go into a VPLS connection back
to a Juniper BNG which dynamically creates the SVLAN/CVLANs, authenticates
the clients vs radius, and assigns DHCP.  I am disabling STP and filtering
it on customer ports.

On Wed, Jan 18, 2017 at 4:47 PM, Seth Mattinen  wrote:

> On 1/18/17 13:33, Josh Baird wrote:
>
>> In Cisco, this would be bpduguard.
>>
>
>
> Dare I suggest this is the perfect example of a use case for a proper
> metro ethernet switch with UNI/NNI port profiles.
>
> ~Seth
>



-- 

Carl Peterson

*PORT NETWORKS*

401 E Pratt St, Ste 2553

Baltimore, MD 21202

(410) 637-3707

Re: [AFMUG] Switch expert help/advice

[Paul Stewart]

Nice!  Common model of deployment especially with Juniper MX upstream …


> On Jan 18, 2017, at 5:54 PM, Carl Peterson  wrote:
> 
> I'm in the process of deploying something similar for our wired MDUs.  Each 
> MDU gets an SVLAN and each customer gets a CVLAN so there is a unique 
> CVLAN.SVLAN for each customer.  The SVLANs go into a VPLS connection back to 
> a Juniper BNG which dynamically creates the SVLAN/CVLANs, authenticates the 
> clients vs radius, and assigns DHCP.  I am disabling STP and filtering it on 
> customer ports.  
> 
> On Wed, Jan 18, 2017 at 4:47 PM, Seth Mattinen  > wrote:
> On 1/18/17 13:33, Josh Baird wrote:
> In Cisco, this would be bpduguard.
> 
> 
> Dare I suggest this is the perfect example of a use case for a proper metro 
> ethernet switch with UNI/NNI port profiles.
> 
> ~Seth
> 
> 
> 
> -- 
> Carl Peterson
> 
> PORT NETWORKS
> 
> 401 E Pratt St, Ste 2553
> 
> Baltimore, MD 21202
> 
> (410) 637-3707 
> 

Re: [AFMUG] Switch expert help/advice

[Sterling Jacobson]

Sounds interesting, but doesn’t fit my model.

Also, not many switches 1U that have 48 port all SFP switches out there, or 48 
port all SFP+ either for that matter under $2500.

From: Af [mailto:af-boun...@afmug.com] On Behalf Of Paul Stewart
Sent: Wednesday, January 18, 2017 6:31 PM
To: Animal Farm 
Subject: Re: [AFMUG] Switch expert help/advice

Nice!  Common model of deployment especially with Juniper MX upstream …


On Jan 18, 2017, at 5:54 PM, Carl Peterson 
mailto:cpeter...@portnetworks.com>> wrote:

I'm in the process of deploying something similar for our wired MDUs.  Each MDU 
gets an SVLAN and each customer gets a CVLAN so there is a unique CVLAN.SVLAN 
for each customer.  The SVLANs go into a VPLS connection back to a Juniper BNG 
which dynamically creates the SVLAN/CVLANs, authenticates the clients vs 
radius, and assigns DHCP.  I am disabling STP and filtering it on customer 
ports.

On Wed, Jan 18, 2017 at 4:47 PM, Seth Mattinen 
mailto:se...@rollernet.us>> wrote:
On 1/18/17 13:33, Josh Baird wrote:
In Cisco, this would be bpduguard.


Dare I suggest this is the perfect example of a use case for a proper metro 
ethernet switch with UNI/NNI port profiles.

~Seth



--
Carl Peterson
PORT NETWORKS
401 E Pratt St, Ste 2553
Baltimore, MD 21202
(410) 637-3707

Re: [AFMUG] Switch expert help/advice

[Josh Reynolds]

2nd hand market there's quite a few. Quanta, Juniper EX4500s, some older
brocade fastirons, etc. I'm sure there's plenty of Cisco's, I just don't
keep up with them so much on the hardware side.

On Jan 18, 2017 7:35 PM, "Sterling Jacobson"  wrote:

> Sounds interesting, but doesn’t fit my model.
>
>
>
> Also, not many switches 1U that have 48 port all SFP switches out there,
> or 48 port all SFP+ either for that matter under $2500.
>
>
>
> *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Paul Stewart
> *Sent:* Wednesday, January 18, 2017 6:31 PM
> *To:* Animal Farm 
> *Subject:* Re: [AFMUG] Switch expert help/advice
>
>
>
> Nice!  Common model of deployment especially with Juniper MX upstream …
>
>
>
>
>
> On Jan 18, 2017, at 5:54 PM, Carl Peterson 
> wrote:
>
>
>
> I'm in the process of deploying something similar for our wired MDUs.
> Each MDU gets an SVLAN and each customer gets a CVLAN so there is a unique
> CVLAN.SVLAN for each customer.  The SVLANs go into a VPLS connection back
> to a Juniper BNG which dynamically creates the SVLAN/CVLANs, authenticates
> the clients vs radius, and assigns DHCP.  I am disabling STP and filtering
> it on customer ports.
>
>
>
> On Wed, Jan 18, 2017 at 4:47 PM, Seth Mattinen  wrote:
>
> On 1/18/17 13:33, Josh Baird wrote:
>
> In Cisco, this would be bpduguard.
>
>
>
> Dare I suggest this is the perfect example of a use case for a proper
> metro ethernet switch with UNI/NNI port profiles.
>
> ~Seth
>
>
>
>
>
> --
>
> Carl Peterson
>
> *PORT NETWORKS*
>
> 401 E Pratt St, Ste 2553
>
> Baltimore, MD 21202
>
> (410) 637-3707
>
>
>

Re: [AFMUG] Switch expert help/advice

[Seth Mattinen]

On 1/18/17 5:35 PM, Sterling Jacobson wrote:

Sounds interesting, but doesn’t fit my model.


Also, not many switches 1U that have 48 port all SFP switches out there,
or 48 port all SFP+ either for that matter under $2500.




True, but you trade it for having the problems you're having. ;)

~Seth

Re: [AFMUG] Switch expert help/advice

[Mike Hammett]

STP and RSTP really need to die. TRILL and SPB were invented because STP and 
RSTP have some big deficiencies. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Sterling Jacobson"  
To: af@afmug.com 
Sent: Wednesday, January 18, 2017 2:02:39 PM 
Subject: Re: [AFMUG] Switch expert help/advice 



Don’t all switches use some form of STP/RSTP Gino? 

I’m talking about best practices for a switch bank really. 

Do I set STP priority number lower than the default on the switch for the ports 
going to other switches? 

And what is the term or feature that means ignore STP type packets from that 
port (customer ports). 

I think I’m getting STP type topology changes every time a downstream customer 
port has a up/down change etc. 

I don’t want those. 



From: Af [mailto:af-boun...@afmug.com] On Behalf Of Gino Villarini 
Sent: Wednesday, January 18, 2017 2:00 AM 
To: af@afmug.com 
Subject: Re: [AFMUG] Switch expert help/advice 


Why are you using stp? 

On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson" 


Gino Villarini 

President 

Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968 
cid:image001.png@01D2718B.144BF200
< af-boun...@afmug.com on behalf of sterl...@avative.net > wrote: 

>Any of you guys work with switches a lot? 
> 
>I use banks of switches in my fiber, set up per neighborhood. 
> 
>But really they are all linked via fiber so it's pretty much like a 
>datacenter. 
> 
>I'm using a few MPLS/VPLS tunnels to the switch banks. 
> 
>I'm having a real hard time tracking down a loop issue though. 
> 
>It's related to MikroTik lovely change in version 6.38 for STP/RSTP 
>bridge stuff. 
> 
>My problem is with an IBM switch I don't know very well. 
> 
>I suspect I have settings wrong for STP/RSTP etc. 
> 
>The switches are a simple configuration of VLAN 1/default for customer 
>traffic, then another VLAN for management from the device at their 
>house/MDU. 
> 
>I pull out the VLAN management at the mikrotik and bridge it with an area 
>wide L2 MPLS network. 
> 
>My problem is the IBM switches keep shutting down access to customer data 
>or management or the other switches they are connected to. 
>The crude method of recovery is reboot the switch. 
> 
>At the 'head' of the VPLS network I use an EOIP tunnel to a hosted 
>mikrotik that hosts the Dude and a few other management VM's on that 
>layer2 network. 
> 
>I'm regretting I did that and didn't create a more sophisticated routed 
>management network. 
> 
>But the hosted mikrotik is complaining of loop packets and sometimes just 
>goes wild and shuts down it's EOIP connecting interface for 60 seconds. 
>I can't seem to find a way to tell it to NOT do that either, seems like 
>it's built in to 6.38 no matter what Loop Protection I turn off or STP I 
>disable. 
>It's not like it's a lot of traffic, it's just seeing some BPDU or STP 
>type packets and killing itself. 
> 
>What is the best practice for switches regarding RSTP/PVRST BDPU guards 
>and STP root paths etc? 
> 
>The switches typically have two uplink ports going to the router or 
>another switch, the rest are customer facing ports. 

Re: [AFMUG] Switch expert help/advice

[Mike Hammett]

Brocade VDX switches in there as well. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Josh Reynolds"  
To: af@afmug.com 
Sent: Wednesday, January 18, 2017 7:49:16 PM 
Subject: Re: [AFMUG] Switch expert help/advice 


2nd hand market there's quite a few. Quanta, Juniper EX4500s, some older 
brocade fastirons, etc. I'm sure there's plenty of Cisco's, I just don't keep 
up with them so much on the hardware side. 


On Jan 18, 2017 7:35 PM, "Sterling Jacobson" < sterl...@avative.net > wrote: 





Sounds interesting, but doesn’t fit my model. 

Also, not many switches 1U that have 48 port all SFP switches out there, or 48 
port all SFP+ either for that matter under $2500. 



From: Af [mailto: af-boun...@afmug.com ] On Behalf Of Paul Stewart 
Sent: Wednesday, January 18, 2017 6:31 PM 
To: Animal Farm < af@afmug.com > 
Subject: Re: [AFMUG] Switch expert help/advice 

Nice! Common model of deployment especially with Juniper MX upstream … 








On Jan 18, 2017, at 5:54 PM, Carl Peterson < cpeter...@portnetworks.com > 
wrote: 



I'm in the process of deploying something similar for our wired MDUs. Each MDU 
gets an SVLAN and each customer gets a CVLAN so there is a unique CVLAN.SVLAN 
for each customer. The SVLANs go into a VPLS connection back to a Juniper BNG 
which dynamically creates the SVLAN/CVLANs, authenticates the clients vs 
radius, and assigns DHCP. I am disabling STP and filtering it on customer 
ports. 



On Wed, Jan 18, 2017 at 4:47 PM, Seth Mattinen < se...@rollernet.us > wrote: 


On 1/18/17 13:33, Josh Baird wrote: 


In Cisco, this would be bpduguard. 




Dare I suggest this is the perfect example of a use case for a proper metro 
ethernet switch with UNI/NNI port profiles. 

~Seth 







-- 


Carl Peterson 
PORT NETWORKS 
401 E Pratt St, Ste 2553 
Baltimore, MD 21202 
(410) 637-3707 

Re: [AFMUG] Switch expert help/advice

[Mark Radabaugh]

You want priority lowest on the switch that is 'most central' to your network.  

For edge ports you probably want bpdu block or shutdown depending on how you 
want to handle it.

You really need to control bpdu's coming from your customers.  You don't want a 
customer accidentally (or maliciously) taking control of your topology.

Mark Radabaugh
Amplex
22690 Pemberville Rd
Luckey, OH 43447
419-261-5996

> On Jan 21, 2017, at 4:30 PM, Mike Hammett  wrote:
> 
> STP and RSTP really need to die. TRILL and SPB were invented because STP and 
> RSTP have some big deficiencies.
> 
> 
> 
> -
> Mike Hammett
> Intelligent Computing Solutions
> 
> Midwest Internet Exchange
> 
> The Brothers WISP
> 
> 
> 
> 
> From: "Sterling Jacobson" 
> To: af@afmug.com
> Sent: Wednesday, January 18, 2017 2:02:39 PM
> Subject: Re: [AFMUG] Switch expert help/advice
> 
> Don’t all switches use some form of STP/RSTP Gino?
>  
> I’m talking about best practices for a switch bank really.
>  
> Do I set STP priority number lower than the default on the switch for the 
> ports going to other switches?
>  
> And what is the term or feature that means ignore STP type packets from that 
> port (customer ports).
>  
> I think I’m getting STP type topology changes every time a downstream 
> customer port has a up/down change etc.
>  
> I don’t want those.
>  
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Gino Villarini
> Sent: Wednesday, January 18, 2017 2:00 AM
> To: af@afmug.com
> Subject: Re: [AFMUG] Switch expert help/advice
>  
> Why are you using stp?
> 
> On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"
>  
> 
> Gino Villarini
> 
> President
> Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968
> 
> 
>  wrote:
> 
> >Any of you guys work with switches a lot?
> >
> >I use banks of switches in my fiber, set up per neighborhood.
> >
> >But really they are all linked via fiber so it's pretty much like a
> >datacenter.
> >
> >I'm using a few MPLS/VPLS tunnels to the switch banks.
> >
> >I'm having a real hard time tracking down a loop issue though.
> >
> >It's related to MikroTik lovely change in version 6.38 for STP/RSTP
> >bridge stuff.
> >
> >My problem is with an IBM switch I don't know very well.
> >
> >I suspect I have settings wrong for STP/RSTP etc.
> >
> >The switches are a simple configuration of VLAN 1/default for customer
> >traffic, then another VLAN for management from the device at their
> >house/MDU.
> >
> >I pull out the VLAN management at the mikrotik and bridge it with an area
> >wide L2 MPLS network.
> >
> >My problem is the IBM switches keep shutting down access to customer data
> >or management or the other switches they are connected to.
> >The crude method of recovery is reboot the switch.
> >
> >At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
> >mikrotik that hosts the Dude and a few other management VM's on that
> >layer2 network.
> >
> >I'm regretting I did that and didn't create a more sophisticated routed
> >management network.
> >
> >But the hosted mikrotik is complaining of loop packets and sometimes just
> >goes wild and shuts down it's EOIP connecting interface for 60 seconds.
> >I can't seem to find a way to tell it to NOT do that either, seems like
> >it's built in to 6.38 no matter what Loop Protection I turn off or STP I
> >disable.
> >It's not like it's a lot of traffic, it's just seeing some BPDU or STP
> >type packets and killing itself.
> >
> >What is the best practice for switches regarding RSTP/PVRST BDPU guards
> >and STP root paths etc?
> >
> >The switches typically have two uplink ports going to the router or
> >another switch, the rest are customer facing ports.
> 
> 

Re: [AFMUG] Switch expert help/advice

[Lewis Bergman]

G.8032 ERP always worked great for us.  Very fast convergence. I think
every manufacturer has their own spin on it.

On Jan 21, 2017 7:44 PM, "Mark Radabaugh"  wrote:

> You want priority lowest on the switch that is 'most central' to your
> network.
>
> For edge ports you probably want bpdu block or shutdown depending on how
> you want to handle it.
>
> You really need to control bpdu's coming from your customers.  You don't
> want a customer accidentally (or maliciously) taking control of your
> topology.
>
> Mark Radabaugh
> Amplex
> 22690 Pemberville Rd
> Luckey, OH 43447
> 419-261-5996 <(419)%20261-5996>
>
> On Jan 21, 2017, at 4:30 PM, Mike Hammett  wrote:
>
> STP and RSTP really need to die. TRILL and SPB were invented because STP
> and RSTP have some big deficiencies.
>
>
>
> -
> Mike Hammett
> Intelligent Computing Solutions <http://www.ics-il.com/>
> <https://www.facebook.com/ICSIL>
> <https://plus.google.com/+IntelligentComputingSolutionsDeKalb>
> <https://www.linkedin.com/company/intelligent-computing-solutions>
> <https://twitter.com/ICSIL>
> Midwest Internet Exchange <http://www.midwest-ix.com/>
> <https://www.facebook.com/mdwestix>
> <https://www.linkedin.com/company/midwest-internet-exchange>
> <https://twitter.com/mdwestix>
> The Brothers WISP <http://www.thebrotherswisp.com/>
> <https://www.facebook.com/thebrotherswisp>
>
>
> <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>
> --
> *From: *"Sterling Jacobson" 
> *To: *af@afmug.com
> *Sent: *Wednesday, January 18, 2017 2:02:39 PM
> *Subject: *Re: [AFMUG] Switch expert help/advice
>
> Don’t all switches use some form of STP/RSTP Gino?
>
>
>
> I’m talking about best practices for a switch bank really.
>
>
>
> Do I set STP priority number lower than the default on the switch for the
> ports going to other switches?
>
>
>
> And what is the term or feature that means ignore STP type packets from
> that port (customer ports).
>
>
>
> I think I’m getting STP type topology changes every time a downstream
> customer port has a up/down change etc.
>
>
>
> I don’t want those.
>
>
>
> *From:* Af [mailto:af-boun...@afmug.com ] *On
> Behalf Of *Gino Villarini
> *Sent:* Wednesday, January 18, 2017 2:00 AM
> *To:* af@afmug.com
> *Subject:* Re: [AFMUG] Switch expert help/advice
>
>
>
> Why are you using stp?
>
> On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"
>
>
>
> *Gino Villarini*
>
> President
>
> Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968
>
> [image: cid:image001.png@01D2718B.144BF200]
>
>  > wrote:
>
> >Any of you guys work with switches a lot?
> >
> >I use banks of switches in my fiber, set up per neighborhood.
> >
> >But really they are all linked via fiber so it's pretty much like a
> >datacenter.
> >
> >I'm using a few MPLS/VPLS tunnels to the switch banks.
> >
> >I'm having a real hard time tracking down a loop issue though.
> >
> >It's related to MikroTik lovely change in version 6.38 for STP/RSTP
> >bridge stuff.
> >
> >My problem is with an IBM switch I don't know very well.
> >
> >I suspect I have settings wrong for STP/RSTP etc.
> >
> >The switches are a simple configuration of VLAN 1/default for customer
> >traffic, then another VLAN for management from the device at their
> >house/MDU.
> >
> >I pull out the VLAN management at the mikrotik and bridge it with an area
> >wide L2 MPLS network.
> >
> >My problem is the IBM switches keep shutting down access to customer data
> >or management or the other switches they are connected to.
> >The crude method of recovery is reboot the switch.
> >
> >At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
> >mikrotik that hosts the Dude and a few other management VM's on that
> >layer2 network.
> >
> >I'm regretting I did that and didn't create a more sophisticated routed
> >management network.
> >
> >But the hosted mikrotik is complaining of loop packets and sometimes just
> >goes wild and shuts down it's EOIP connecting interface for 60 seconds.
> >I can't seem to find a way to tell it to NOT do that either, seems like
> >it's built in to 6.38 no matter what Loop Protection I turn off or STP I
> >disable.
> >It's not like it's a lot of traffic, it's just seeing some BPDU or STP
> >type packets and killing itself.
> >
> >What is the best practice for switches regarding RSTP/PVRST BDPU guards
> >and STP root paths etc?
> >
> >The switches typically have two uplink ports going to the router or
> >another switch, the rest are customer facing ports.
>
>

Re: [AFMUG] Switch expert help/advice

[Josh Reynolds]

Only works for ring topologies, not tree.

On Sat, Jan 21, 2017 at 9:45 PM, Lewis Bergman 
wrote:

> G.8032 ERP always worked great for us.  Very fast convergence. I think
> every manufacturer has their own spin on it.
>
> On Jan 21, 2017 7:44 PM, "Mark Radabaugh"  wrote:
>
>> You want priority lowest on the switch that is 'most central' to your
>> network.
>>
>> For edge ports you probably want bpdu block or shutdown depending on how
>> you want to handle it.
>>
>> You really need to control bpdu's coming from your customers.  You don't
>> want a customer accidentally (or maliciously) taking control of your
>> topology.
>>
>> Mark Radabaugh
>> Amplex
>> 22690 Pemberville Rd
>> Luckey, OH 43447
>> 419-261-5996 <(419)%20261-5996>
>>
>> On Jan 21, 2017, at 4:30 PM, Mike Hammett  wrote:
>>
>> STP and RSTP really need to die. TRILL and SPB were invented because STP
>> and RSTP have some big deficiencies.
>>
>>
>>
>> -
>> Mike Hammett
>> Intelligent Computing Solutions <http://www.ics-il.com/>
>> <https://www.facebook.com/ICSIL>
>> <https://plus.google.com/+IntelligentComputingSolutionsDeKalb>
>> <https://www.linkedin.com/company/intelligent-computing-solutions>
>> <https://twitter.com/ICSIL>
>> Midwest Internet Exchange <http://www.midwest-ix.com/>
>> <https://www.facebook.com/mdwestix>
>> <https://www.linkedin.com/company/midwest-internet-exchange>
>> <https://twitter.com/mdwestix>
>> The Brothers WISP <http://www.thebrotherswisp.com/>
>> <https://www.facebook.com/thebrotherswisp>
>>
>>
>> <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>
>> --
>> *From: *"Sterling Jacobson" 
>> *To: *af@afmug.com
>> *Sent: *Wednesday, January 18, 2017 2:02:39 PM
>> *Subject: *Re: [AFMUG] Switch expert help/advice
>>
>> Don’t all switches use some form of STP/RSTP Gino?
>>
>>
>>
>> I’m talking about best practices for a switch bank really.
>>
>>
>>
>> Do I set STP priority number lower than the default on the switch for the
>> ports going to other switches?
>>
>>
>>
>> And what is the term or feature that means ignore STP type packets from
>> that port (customer ports).
>>
>>
>>
>> I think I’m getting STP type topology changes every time a downstream
>> customer port has a up/down change etc.
>>
>>
>>
>> I don’t want those.
>>
>>
>>
>> *From:* Af [mailto:af-boun...@afmug.com ] *On
>> Behalf Of *Gino Villarini
>> *Sent:* Wednesday, January 18, 2017 2:00 AM
>> *To:* af@afmug.com
>> *Subject:* Re: [AFMUG] Switch expert help/advice
>>
>>
>>
>> Why are you using stp?
>>
>> On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"
>>
>>
>>
>> *Gino Villarini*
>>
>> President
>>
>> Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968
>>
>> [image: cid:image001.png@01D2718B.144BF200]
>>
>> > > wrote:
>>
>> >Any of you guys work with switches a lot?
>> >
>> >I use banks of switches in my fiber, set up per neighborhood.
>> >
>> >But really they are all linked via fiber so it's pretty much like a
>> >datacenter.
>> >
>> >I'm using a few MPLS/VPLS tunnels to the switch banks.
>> >
>> >I'm having a real hard time tracking down a loop issue though.
>> >
>> >It's related to MikroTik lovely change in version 6.38 for STP/RSTP
>> >bridge stuff.
>> >
>> >My problem is with an IBM switch I don't know very well.
>> >
>> >I suspect I have settings wrong for STP/RSTP etc.
>> >
>> >The switches are a simple configuration of VLAN 1/default for customer
>> >traffic, then another VLAN for management from the device at their
>> >house/MDU.
>> >
>> >I pull out the VLAN management at the mikrotik and bridge it with an area
>> >wide L2 MPLS network.
>> >
>> >My problem is the IBM switches keep shutting down access to customer data
>> >or management or the other switches they are connected to.
>> >The crude method of recovery is reboot the switch.
>> >
>> >At the 'head' of the VPLS network I use an EOIP tunnel to a hosted
>> >mikrotik that hosts the Dude and a few other management VM's on that
>> >layer2 network.
>> >
>> >I'm regretting I did that and didn't create a more sophisticated routed
>> >management network.
>> >
>> >But the hosted mikrotik is complaining of loop packets and sometimes just
>> >goes wild and shuts down it's EOIP connecting interface for 60 seconds.
>> >I can't seem to find a way to tell it to NOT do that either, seems like
>> >it's built in to 6.38 no matter what Loop Protection I turn off or STP I
>> >disable.
>> >It's not like it's a lot of traffic, it's just seeing some BPDU or STP
>> >type packets and killing itself.
>> >
>> >What is the best practice for switches regarding RSTP/PVRST BDPU guards
>> >and STP root paths etc?
>> >
>> >The switches typically have two uplink ports going to the router or
>> >another switch, the rest are customer facing ports.
>>
>>

Re: [AFMUG] Switch expert help/advice

[Gino Villarini]

Ill very much so would like to se TRILL and/or SPB implemente in major vendor 
Switches… But it appears as it will never happen

Not enough traction

From: Af mailto:af-boun...@afmug.com>> on behalf of Josh 
Reynolds mailto:j...@kyneticwifi.com>>
Reply-To: "af@afmug.com<mailto:af@afmug.com>" 
mailto:af@afmug.com>>
Date: Sunday, January 22, 2017 at 1:27 AM
To: "af@afmug.com<mailto:af@afmug.com>" mailto:af@afmug.com>>
Subject: Re: [AFMUG] Switch expert help/advice

Only works for ring topologies, not tree.




Gino Villarini


President
Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968

[cid:aeronet-logo_310cfc3e-6691-4f69-bd49-b37b834b9238.png]

On Sat, Jan 21, 2017 at 9:45 PM, Lewis Bergman 
mailto:lewis.berg...@gmail.com>> wrote:
G.8032 ERP always worked great for us.  Very fast convergence. I think every 
manufacturer has their own spin on it.

On Jan 21, 2017 7:44 PM, "Mark Radabaugh" 
mailto:m...@amplex.net>> wrote:
You want priority lowest on the switch that is 'most central' to your network.

For edge ports you probably want bpdu block or shutdown depending on how you 
want to handle it.

You really need to control bpdu's coming from your customers.  You don't want a 
customer accidentally (or maliciously) taking control of your topology.

Mark Radabaugh
Amplex
22690 Pemberville Rd
Luckey, OH 43447
419-261-5996

On Jan 21, 2017, at 4:30 PM, Mike Hammett 
mailto:af...@ics-il.net>> wrote:

STP and RSTP really need to die. TRILL and SPB were invented because STP and 
RSTP have some big deficiencies.



-
Mike Hammett
Intelligent Computing Solutions<http://www.ics-il.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL>
Midwest Internet Exchange<http://www.midwest-ix.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix>
The Brothers WISP<http://www.thebrotherswisp.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png]


<https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>
____________
From: "Sterling Jacobson" mailto:sterl...@avative.net>>
To: af@afmug.com<mailto:af@afmug.com>
Sent: Wednesday, January 18, 2017 2:02:39 PM
Subject: Re: [AFMUG] Switch expert help/advice

Don’t all switches use some form of STP/RSTP Gino?

I’m talking about best practices for a switch bank really.

Do I set STP priority number lower than the default on the switch for the ports 
going to other switches?

And what is the term or feature that means ignore STP type packets from that 
port (customer ports).

I think I’m getting STP type topology changes every time a downstream customer 
port has a up/down change etc.

I don’t want those.

From: Af [mailto:af-boun...@afmug.com] On Behalf Of Gino Villarini
Sent: Wednesday, January 18, 2017 2:00 AM
To: af@afmug.com<mailto:af@afmug.com>
Subject: Re: [AFMUG] Switch expert help/advice

Why are you using stp?

On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson"



Gino Villarini

President

Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968


[cid:image001.png@01D2718B.144BF200]
mailto:af-boun...@afmug.com%20on%20behalf%20of%20sterl...@avative.net>>
 wrote:

>Any of you guys work with switches a lot?
>
>I use banks of switches in my fiber, set up per neighborhood.
>
>But really they are all linked via fiber so it's pretty much like a
>datacenter.
>
>I'm using a few MPLS/VPLS tunnels to the switch banks.
>
>I'm having a real hard time tracking down a loop issue though.
>
>It's related to MikroTik lovely change in version 6.38 for STP/RSTP
>bridge stuff.
>
>My problem is with an IBM switch I don't know very well.
>
>I suspect I have settings wrong for STP/RSTP etc.
>
>The switches are a simple configuration of VLAN 1/default for customer
>traffic, then another VLAN for management from the device at their
>house/MDU.
>
>I pull out the VLAN management at the mikrotik and bridge it with an area
>wide L2 MPLS network.
>
>My problem is the IBM switches keep shutting down access to customer data
>or management or the other switches they are connected to.
>The crude method of recovery is reboot the switch.
>
>At

Re: [AFMUG] Switch expert help/advice

[Mike Hammett]

It looks like EVPN\VXLAN should be the new targets. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Gino Villarini"  
To: af@afmug.com 
Sent: Monday, January 23, 2017 8:44:01 AM 
Subject: Re: [AFMUG] Switch expert help/advice 


Ill very much so would like to se TRILL and/or SPB implemente in major vendor 
Switches… But it appears as it will never happen 


Not enough traction 


From: Af < af-boun...@afmug.com > on behalf of Josh Reynolds < 
j...@kyneticwifi.com > 
Reply-To: " af@afmug.com " < af@afmug.com > 
Date: Sunday, January 22, 2017 at 1:27 AM 
To: " af@afmug.com " < af@afmug.com > 
Subject: Re: [AFMUG] Switch expert help/advice 






Only works for ring topologies, not tree. 






Gino Villarini 
President 
Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968 
On Sat, Jan 21, 2017 at 9:45 PM, Lewis Bergman < lewis.berg...@gmail.com > 
wrote: 



G.8032 ERP always worked great for us. Very fast convergence. I think every 
manufacturer has their own spin on it. 




On Jan 21, 2017 7:44 PM, "Mark Radabaugh" < m...@amplex.net > wrote: 




You want priority lowest on the switch that is 'most central' to your network. 


For edge ports you probably want bpdu block or shutdown depending on how you 
want to handle it. 


You really need to control bpdu's coming from your customers. You don't want a 
customer accidentally (or maliciously) taking control of your topology. 

Mark Radabaugh 
Amplex 
22690 Pemberville Rd 
Luckey, OH 43447 
419-261-5996 

On Jan 21, 2017, at 4:30 PM, Mike Hammett < af...@ics-il.net > wrote: 





STP and RSTP really need to die. TRILL and SPB were invented because STP and 
RSTP have some big deficiencies. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 






From: "Sterling Jacobson" < sterl...@avative.net > 
To: af@afmug.com 
Sent: Wednesday, January 18, 2017 2:02:39 PM 
Subject: Re: [AFMUG] Switch expert help/advice 



Don’t all switches use some form of STP/RSTP Gino? 

I’m talking about best practices for a switch bank really. 

Do I set STP priority number lower than the default on the switch for the ports 
going to other switches? 

And what is the term or feature that means ignore STP type packets from that 
port (customer ports). 

I think I’m getting STP type topology changes every time a downstream customer 
port has a up/down change etc. 

I don’t want those. 



From: Af [ mailto:af-boun...@afmug.com ] On Behalf Of Gino Villarini 
Sent: Wednesday, January 18, 2017 2:00 AM 
To: af@afmug.com 
Subject: Re: [AFMUG] Switch expert help/advice 


Why are you using stp? 

On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson" 


Gino Villarini 

President 

Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968 
cid:image001.png@01D2718B.144BF200
< af-boun...@afmug.com on behalf of sterl...@avative.net > wrote: 

>Any of you guys work with switches a lot? 
> 
>I use banks of switches in my fiber, set up per neighborhood. 
> 
>But really they are all linked via fiber so it's pretty much like a 
>datacenter. 
> 
>I'm using a few MPLS/VPLS tunnels to the switch banks. 
> 
>I'm having a real hard time tracking down a loop issue though. 
> 
>It's related to MikroTik lovely change in version 6.38 for STP/RSTP 
>bridge stuff. 
> 
>My problem is with an IBM switch I don't know very well. 
> 
>I suspect I have settings wrong for STP/RSTP etc. 
> 
>The switches are a simple configuration of VLAN 1/default for customer 
>traffic, then another VLAN for management from the device at their 
>house/MDU. 
> 
>I pull out the VLAN management at the mikrotik and bridge it with an area 
>wide L2 MPLS network. 
> 
>My problem is the IBM switches keep shutting down access to customer data 
>or management or the other switches they are connected to. 
>The crude method of recovery is reboot the switch. 
> 
>At the 'head' of the VPLS network I use an EOIP tunnel to a hosted 
>mikrotik that hosts the Dude and a few other management VM's on that 
>layer2 network. 
> 
>I'm regretting I did that and didn't create a more sophisticated routed 
>management network. 
> 
>But the hosted mikrotik is complaining of loop packets and sometimes just 
>goes wild and shuts down it's EOIP connecting interface for 60 seconds. 
>I can't seem to find a way to tell it to NOT do that either, seems like 
>it's built in to 6.38 no matter what Loop Protection I turn off or STP I 
>disable. 
>It's not like it's a lot of traffic, it's just seeing some BPDU or STP 
>type packets and killing itself. 
> 
>What is the best practice for switches regarding RSTP/PVRST BDPU guards 
>and STP root paths etc? 
> 
>The switches typically have two uplink ports going to the router or 
>another switch, the rest are customer facing ports. 

Re: [AFMUG] Switch expert help/advice

[Josh Reynolds]

For DataCenter. Doesn't help SP

On Jan 23, 2017 10:25 AM, "Mike Hammett"  wrote:

> It looks like EVPN\VXLAN should be the new targets.
>
>
>
> -
> Mike Hammett
> Intelligent Computing Solutions <http://www.ics-il.com/>
> <https://www.facebook.com/ICSIL>
> <https://plus.google.com/+IntelligentComputingSolutionsDeKalb>
> <https://www.linkedin.com/company/intelligent-computing-solutions>
> <https://twitter.com/ICSIL>
> Midwest Internet Exchange <http://www.midwest-ix.com/>
> <https://www.facebook.com/mdwestix>
> <https://www.linkedin.com/company/midwest-internet-exchange>
> <https://twitter.com/mdwestix>
> The Brothers WISP <http://www.thebrotherswisp.com/>
> <https://www.facebook.com/thebrotherswisp>
>
>
> <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>
> ----------
> *From: *"Gino Villarini" 
> *To: *af@afmug.com
> *Sent: *Monday, January 23, 2017 8:44:01 AM
> *Subject: *Re: [AFMUG] Switch expert help/advice
>
> Ill very much so would like to se TRILL and/or SPB implemente in major
> vendor Switches… But it appears as it will never happen
>
> Not enough traction
>
> From: Af  on behalf of Josh Reynolds <
> j...@kyneticwifi.com>
> Reply-To: "af@afmug.com" 
> Date: Sunday, January 22, 2017 at 1:27 AM
> To: "af@afmug.com" 
> Subject: Re: [AFMUG] Switch expert help/advice
>
> Only works for ring topologies, not tree.
>
>
>
> *Gino Villarini*
> President
> Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968
>
> On Sat, Jan 21, 2017 at 9:45 PM, Lewis Bergman 
> wrote:
>
>> G.8032 ERP always worked great for us.  Very fast convergence. I think
>> every manufacturer has their own spin on it.
>>
>> On Jan 21, 2017 7:44 PM, "Mark Radabaugh"  wrote:
>>
>>> You want priority lowest on the switch that is 'most central' to your
>>> network.
>>>
>>> For edge ports you probably want bpdu block or shutdown depending on how
>>> you want to handle it.
>>>
>>> You really need to control bpdu's coming from your customers.  You don't
>>> want a customer accidentally (or maliciously) taking control of your
>>> topology.
>>>
>>> Mark Radabaugh
>>> Amplex
>>> 22690 Pemberville Rd
>>> Luckey, OH 43447
>>> 419-261-5996 <%28419%29%20261-5996>
>>>
>>> On Jan 21, 2017, at 4:30 PM, Mike Hammett  wrote:
>>>
>>> STP and RSTP really need to die. TRILL and SPB were invented because STP
>>> and RSTP have some big deficiencies.
>>>
>>>
>>>
>>> -
>>> Mike Hammett
>>> Intelligent Computing Solutions <http://www.ics-il.com/>
>>> <https://www.facebook.com/ICSIL>
>>> <https://plus.google.com/+IntelligentComputingSolutionsDeKalb>
>>> <https://www.linkedin.com/company/intelligent-computing-solutions>
>>> <https://twitter.com/ICSIL>
>>> Midwest Internet Exchange <http://www.midwest-ix.com/>
>>> <https://www.facebook.com/mdwestix>
>>> <https://www.linkedin.com/company/midwest-internet-exchange>
>>> <https://twitter.com/mdwestix>
>>> The Brothers WISP <http://www.thebrotherswisp.com/>
>>> <https://www.facebook.com/thebrotherswisp>
>>>
>>>
>>> <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>
>>> --
>>> *From: *"Sterling Jacobson" 
>>> *To: *af@afmug.com
>>> *Sent: *Wednesday, January 18, 2017 2:02:39 PM
>>> *Subject: *Re: [AFMUG] Switch expert help/advice
>>>
>>> Don’t all switches use some form of STP/RSTP Gino?
>>>
>>>
>>>
>>> I’m talking about best practices for a switch bank really.
>>>
>>>
>>>
>>> Do I set STP priority number lower than the default on the switch for
>>> the ports going to other switches?
>>>
>>>
>>>
>>> And what is the term or feature that means ignore STP type packets from
>>> that port (customer ports).
>>>
>>>
>>>
>>> I think I’m getting STP type topology changes every time a downstream
>>> customer port has a up/down change etc.
>>>
>>>
>>>
>>> I don’t want those.
>>>
>>>
>>>
>>> *From:* Af [mailto:af-boun...@afmug.com ] *On
>>> Behalf Of *Gino Villarini
>>> *Sent:* We

Re: [AFMUG] Switch expert help/advice

[Mike Hammett]

Why not? That may not be the intended use, but surely it works. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Josh Reynolds"  
To: af@afmug.com 
Sent: Monday, January 23, 2017 10:29:28 AM 
Subject: Re: [AFMUG] Switch expert help/advice 


For DataCenter. Doesn't help SP 


On Jan 23, 2017 10:25 AM, "Mike Hammett" < af...@ics-il.net > wrote: 




It looks like EVPN\VXLAN should be the new targets. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 






From: "Gino Villarini" < g...@aeronetpr.com > 
To: af@afmug.com 
Sent: Monday, January 23, 2017 8:44:01 AM 
Subject: Re: [AFMUG] Switch expert help/advice 


Ill very much so would like to se TRILL and/or SPB implemente in major vendor 
Switches… But it appears as it will never happen 


Not enough traction 


From: Af < af-boun...@afmug.com > on behalf of Josh Reynolds < 
j...@kyneticwifi.com > 
Reply-To: " af@afmug.com " < af@afmug.com > 
Date: Sunday, January 22, 2017 at 1:27 AM 
To: " af@afmug.com " < af@afmug.com > 
Subject: Re: [AFMUG] Switch expert help/advice 






Only works for ring topologies, not tree. 






Gino Villarini 
President 
Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968 
On Sat, Jan 21, 2017 at 9:45 PM, Lewis Bergman < lewis.berg...@gmail.com > 
wrote: 



G.8032 ERP always worked great for us. Very fast convergence. I think every 
manufacturer has their own spin on it. 




On Jan 21, 2017 7:44 PM, "Mark Radabaugh" < m...@amplex.net > wrote: 




You want priority lowest on the switch that is 'most central' to your network. 


For edge ports you probably want bpdu block or shutdown depending on how you 
want to handle it. 


You really need to control bpdu's coming from your customers. You don't want a 
customer accidentally (or maliciously) taking control of your topology. 

Mark Radabaugh 
Amplex 
22690 Pemberville Rd 
Luckey, OH 43447 
419-261-5996 

On Jan 21, 2017, at 4:30 PM, Mike Hammett < af...@ics-il.net > wrote: 





STP and RSTP really need to die. TRILL and SPB were invented because STP and 
RSTP have some big deficiencies. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 






From: "Sterling Jacobson" < sterl...@avative.net > 
To: af@afmug.com 
Sent: Wednesday, January 18, 2017 2:02:39 PM 
Subject: Re: [AFMUG] Switch expert help/advice 



Don’t all switches use some form of STP/RSTP Gino? 

I’m talking about best practices for a switch bank really. 

Do I set STP priority number lower than the default on the switch for the ports 
going to other switches? 

And what is the term or feature that means ignore STP type packets from that 
port (customer ports). 

I think I’m getting STP type topology changes every time a downstream customer 
port has a up/down change etc. 

I don’t want those. 



From: Af [ mailto:af-boun...@afmug.com ] On Behalf Of Gino Villarini 
Sent: Wednesday, January 18, 2017 2:00 AM 
To: af@afmug.com 
Subject: Re: [AFMUG] Switch expert help/advice 


Why are you using stp? 

On 1/18/17, 12:33 AM, "Af on behalf of Sterling Jacobson" 


Gino Villarini 

President 

Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968 
cid:image001.png@01D2718B.144BF200
< af-boun...@afmug.com on behalf of sterl...@avative.net > wrote: 

>Any of you guys work with switches a lot? 
> 
>I use banks of switches in my fiber, set up per neighborhood. 
> 
>But really they are all linked via fiber so it's pretty much like a 
>datacenter. 
> 
>I'm using a few MPLS/VPLS tunnels to the switch banks. 
> 
>I'm having a real hard time tracking down a loop issue though. 
> 
>It's related to MikroTik lovely change in version 6.38 for STP/RSTP 
>bridge stuff. 
> 
>My problem is with an IBM switch I don't know very well. 
> 
>I suspect I have settings wrong for STP/RSTP etc. 
> 
>The switches are a simple configuration of VLAN 1/default for customer 
>traffic, then another VLAN for management from the device at their 
>house/MDU. 
> 
>I pull out the VLAN management at the mikrotik and bridge it with an area 
>wide L2 MPLS network. 
> 
>My problem is the IBM switches keep shutting down access to customer data 
>or management or the other switches they are connected to. 
>The crude method of recovery is reboot the switch. 
> 
>At the 'head' of the VPLS network I use an EOIP tunnel to a hosted 
>mikrotik that hosts the Dude and a few other management VM's on that 
>layer2 network. 
> 
>I'm regretting I did that and didn't create a more sop

Re: [AFMUG] Switch expert help/advice

[Gino Villarini]

I have not analized those two protocols for SP use, how do they work?

From: Af mailto:af-boun...@afmug.com>> on behalf of Mike 
Hammett mailto:af...@ics-il.net>>
Reply-To: "af@afmug.com<mailto:af@afmug.com>" 
mailto:af@afmug.com>>
Date: Tuesday, January 24, 2017 at 9:17 AM
To: "af@afmug.com<mailto:af@afmug.com>" mailto:af@afmug.com>>
Subject: Re: [AFMUG] Switch expert help/advice

Why not? That may not be the intended use, but surely it works.



-
Mike Hammett
Intelligent Computing Solutions<http://www.ics-il.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL>
Midwest Internet Exchange<http://www.midwest-ix.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix>
The Brothers WISP<http://www.thebrotherswisp.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png]


<https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>



Gino Villarini


President
Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968

[cid:aeronet-logo_310cfc3e-6691-4f69-bd49-b37b834b9238.png]


From: "Josh Reynolds" mailto:j...@kyneticwifi.com>>
To: af@afmug.com<mailto:af@afmug.com>
Sent: Monday, January 23, 2017 10:29:28 AM
Subject: Re: [AFMUG] Switch expert help/advice

For DataCenter. Doesn't help SP

On Jan 23, 2017 10:25 AM, "Mike Hammett" 
mailto:af...@ics-il.net>> wrote:
It looks like EVPN\VXLAN should be the new targets.



-
Mike Hammett
Intelligent Computing Solutions<http://www.ics-il.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL>
Midwest Internet Exchange<http://www.midwest-ix.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix>
The Brothers WISP<http://www.thebrotherswisp.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png]


<https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>

From: "Gino Villarini" mailto:g...@aeronetpr.com>>
To: af@afmug.com<mailto:af@afmug.com>
Sent: Monday, January 23, 2017 8:44:01 AM
Subject: Re: [AFMUG] Switch expert help/advice

Ill very much so would like to se TRILL and/or SPB implemente in major vendor 
Switches… But it appears as it will never happen

Not enough traction

From: Af mailto:af-boun...@afmug.com>> on behalf of Josh 
Reynolds mailto:j...@kyneticwifi.com>>
Reply-To: "af@afmug.com<mailto:af@afmug.com>" 
mailto:af@afmug.com>>
Date: Sunday, January 22, 2017 at 1:27 AM
To: "af@afmug.com<mailto:af@afmug.com>" mailto:af@afmug.com>>
Subject: Re: [AFMUG] Switch expert help/advice

Only works for ring topologies, not tree.




Gino Villarini


President
Metro Office Park #18 Suite 304 Guaynabo, Puerto Rico 00968

[http://127.0.0.1:65365/service/home/%7E/?auth=co&id=1da921bb-b2a8-4368-bc2e-c997a36651f3:108253&part=1.2]

On Sat, Jan 21, 2017 at 9:45 PM, Lewis Bergman 
mailto:lewis.berg...@gmail.com>> wrote:
G.8032 ERP always worked great for us.  Very fast convergence. I think every 
manufacturer has their own spin on it.

On Jan 21, 2017 7:44 PM, "Mark Radabaugh" 
mailto:m...@amplex.net>> wrote:
You want priority lowest on the switch that is 'most central' to your network.

For edge ports you probably want bpdu block or shutdown depending on how you 
want to handle it.

You really need to control bpdu's coming from your customers.  You don't want a 
customer accidentally (or maliciously) taking control of your topology.

Mark Radabaugh
Amplex
22690 Pemberville Rd
Luckey, OH 43447
419-261-5996

On Jan 21, 2017, at 4:30 PM, Mike Ham