[j-nsp] SRX110 and Cisco2970 MSTP issue

Ben Dale bdale at comlinx.com.au
Tue Nov 20 01:25:59 EST 2012


If you're having packet loss (sporadic), run:

show spanning-tree bridge

on the SRX and confirm that your topology is actually stable - look for topology age.
 
Cheers,

Ben

On 20/11/2012, at 4:07 PM, Jonathan Lassoff <jof at thejof.com> wrote:

> The other that that comes to mind for me is security policy.
> 
> Is it possible that there could be security policy in place that
> blocks flows in the topology that is formed when your SRX is root?
> 
> Cheers,
> jof
> 
> On Mon, Nov 19, 2012 at 9:55 PM, Jeff Wheeler <jsw at inconcepts.biz> wrote:
>> On Mon, Nov 19, 2012 at 6:04 PM, Ali Sumsam
>> <ali+junipernsp at eintellego.net> wrote:
>>> If I try to set the priority on one of the SRX110 to become root bridge,
>>> MSTP seems to be converged but there are huge packet losses in the network.
>>> I removed the priority and one of the cisco2970 became root and then
>>> everything seems to be fine. No packet loss after that.
>> 
>> Just taking a wild guess here, but does the SRX110 have enough
>> forwarding performance, and enough port speed, to switch all of the
>> traffic between your 2970s?  Check the CPU usage and link headroom
>> when the SRX is root.  Unless you manipulate your port costs, the
>> configuration you suggested would have traffic going
>> 2970#1---SRX110---2970#2.
>> 
>> --
>> Jeff S Wheeler <jsw at inconcepts.biz>
>> Sr Network Operator  /  Innovative Network Concepts
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 




More information about the juniper-nsp mailing list