3750 что твориться? flapping!?

[Aramis]

Вообщем в логах летят сообщения:
Oct 17 12:22:02: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 12:22:04: %SW_MATM-4-MACFLAP_NOTIF: Host 0011.2fef.191c in vlan 159 is flapping between port Gi2/0/1 and port Gi1/0/1
Oct 17 12:22:05: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 12:26:35: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 12:26:38: %SW_MATM-4-MACFLAP_NOTIF: Host 0001.02dd.3444 in vlan 157 is flapping between port Gi2/0/1 and port Gi1/0/4
Oct 17 12:26:38: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up

Что это , как могут скакать маки?
топологию сети прилагаю:
sh cdp ne
Core344.nccp.ru Gig 1/0/12 172 R S I WS-C6506- Gig 4/9
Cat21b.nccp.ru Gig 2/0/6 132 S I WS-C2950S Gig 0/1
Core94.nccp.ru Gig 2/0/12 129 R S I WS-C6506- Gig 4/7
Cat21g-1.nccp.ru Gig 1/0/5 155 S I WS-C2950G Gig 0/1
Cat21g-1.nccp.ru Gig 2/0/5 155 S I WS-C2950G Gig 0/2
Cat20-1.nccp.ru Gig 2/0/1 176 S I WS-C2950S Gig 0/2
Cat20-1.nccp.ru Gig 1/0/1 176 S I WS-C2950S Gig 0/1
Cat301-1.nccp.ru Gig 2/0/7 146 S I WS-C2950S Gig 0/2
Cat301-1.nccp.ru Gig 1/0/7 146 S I WS-C2950S Gig 0/1
Cat9-2.nccp.ru Gig 2/0/4 134 S I WS-C2950G Gig 0/1
Cat9-1.nccp.ru Gig 1/0/4 175 S I WS-C2950G Gig 0/2
sh int status
Port Name Status Vlan Duplex Speed Type
Gi1/0/1 Trunk to Cat20/1 connected trunk a-full a-1000 1000BaseSX SFP
Gi1/0/2 Trunk to Cat20/2 disabled 1 auto auto 1000BaseSX SFP
Gi1/0/3 Trunk to Cat20/3 disabled 1 auto auto 1000BaseSX SFP
Gi1/0/4 trunk to_cat9/1 connected trunk a-full a-1000 1000BaseLX SFP
Gi1/0/5 Trunk to Cat21g/1_ connected trunk a-full a-1000 1000BaseLX SFP
Gi1/0/6 Trunk to Cat21b/1_ notconnect 1 auto auto 1000BaseSX SFP
Gi1/0/7 Trunk to Cat301/1_ connected trunk a-full a-1000 1000BaseSX SFP
Gi1/0/8 notconnect 1 auto auto Not Present
Gi1/0/9 notconnect 1 auto auto Not Present
Gi1/0/10 notconnect 1 auto auto Not Present
Gi1/0/11 notconnect 1 auto auto Not Present
Gi1/0/12 Uplink to Cat4506u connected routed a-full a-1000 1000BaseLX SFP
Gi2/0/1 trunk to_cat20/1 connected trunk a-full a-1000 1000BaseSX SFP
Gi2/0/2 trunk to_cat20/2 disabled 1 auto auto 1000BaseSX SFP
Gi2/0/3 trunk to_cat20/3 disabled 1 auto auto 1000BaseSX SFP
Gi2/0/4 trunk to_cat9/2 connected trunk a-full a-1000 1000BaseLX SFP
Gi2/0/5 Trunk to Cat21g/1- connected trunk a-full a-1000 1000BaseLX SFP
Gi2/0/6 Trunk to Cat21b/1- connected trunk a-full a-1000 1000BaseSX SFP
Gi2/0/7 Trunk to Cat301/1- connected trunk a-full a-1000 1000BaseSX SFP
Gi2/0/8 notconnect 1 auto auto Not Present
Gi2/0/9 notconnect 1 auto auto Not Present

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[hizel]

видимо какой-то stp поднят, один линк падает, народ ломится через другой

[Yam]

Информации мало, но похоже на петлю.

[Aramis]

видимо какой-то stp поднят, один линк падает, народ ломится через другой

Не понял , что значит какой то?!

[Aramis]

Информации мало, но похоже на петлю.

Ну вот по поводу пели я сомневаюсь. Чем похоже на петлю? Между разными портами твориться оное, вот:

Код: Выделить всё

Oct 17 13:36:08: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 13:36:11: %SW_MATM-4-MACFLAP_NOTIF: Host 000c.6ed6.784e in vlan 157 is flapping between port Gi2/0/4 and port Gi1/0/1
Oct 17 13:36:11: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 13:36:41: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to down
Oct 17 13:36:44: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up
Oct 17 13:38:21: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 13:38:24: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 13:38:25: %SW_MATM-4-MACFLAP_NOTIF: Host 0011.2fef.191c in vlan 159 is flapping between port Gi1/0/1 and port Gi2/0/6
Oct 17 13:38:43: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/5, changed state to down
Oct 17 13:38:46: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/5, changed state to up
Oct 17 13:40:40: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 13:40:42: %SW_MATM-4-MACFLAP_NOTIF: Host 0001.02db.c2e7 in vlan 156 is flapping between port Gi2/0/1 and port Gi1/0/1
Oct 17 13:40:43: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 13:41:58: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to down
Oct 17 13:42:01: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up
Oct 17 13:42:54: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 13:42:57: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 13:43:14: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 13:43:17: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 13:44:12: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 13:44:15: %SW_MATM-4-MACFLAP_NOTIF: Host 0011.2fef.191c in vlan 159 is flapping between port Gi1/0/1 and port Gi2/0/6
Oct 17 13:44:15: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 13:46:38: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to down
Oct 17 13:46:41: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up
Oct 17 13:51:41: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 13:51:44: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 13:53:06: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to down
Oct 17 13:53:10: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up
Oct 17 13:54:28: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 13:54:31: %SW_MATM-4-MACFLAP_NOTIF: Host 0007.e93d.a4be in vlan 172 is flapping between port Gi1/0/1 and port Gi2/0/4
Oct 17 13:54:31: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 13:56:23: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 13:56:26: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 13:57:57: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 13:58:00: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 13:58:53: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/5, changed state to down
Oct 17 13:58:57: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/5, changed state to up
Oct 17 14:03:00: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to down
Oct 17 14:03:03: %SW_MATM-4-MACFLAP_NOTIF: Host 0017.3199.d6fa in vlan 159 is flapping between port Gi2/0/1 and port Gi1/0/1
Oct 17 14:03:03: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/1, changed state to up
Oct 17 14:09:42: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/5, changed state to down
Oct 17 14:09:45: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/5, changed state to up

[zingel]

Внимательно прочитайте правила оформелния сообщений в этом форуме. Где sh run?Где sh ver?

[hizel]

а почему у вас интерфейсы переодически падают?

[Aramis]

Код: Выделить всё

Sh run
Building configuration...

Current configuration : 10214 bytes
!
! Last configuration change at 12:05:32 NSK Fri Oct 17 2008 by mon
!
version 12.2
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname dCat20
!
boot-start-marker
boot-end-marker
!
logging buffered 16384
enable secret 5 **************.
!
username **** password 7 **************
username **** password 7 **************
username **** password 7 **************
username **** password 7 **************
username **** privilege 15 password 7 **************
username **** password 7 **************
username **** password 7 **************
aaa new-model
!
!
aaa authentication login default local
!
!
!
aaa session-id common
clock timezone NSK 6
clock summer-time NSK recurring last Sun Mar 3:00 last Sun Oct 3:00
switch 1 provision ws-c3750g-12s
switch 2 provision ws-c3750g-12s
system mtu routing 1500
ip subnet-zero
ip routing
ip domain-name nccp.ru
ip name-server 192.168.200.2
ip name-server 192.168.200.11
!
!
!
crypto pki trustpoint TP-self-signed-2227607040
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2227607040
 revocation-check none
 rsakeypair TP-self-signed-2227607040
!
!
crypto pki certificate chain TP-self-signed-2227607040
 certificate self-signed 01
<SKIPED>
  quit
!
!
!
port-channel load-balance dst-mac
!
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface GigabitEthernet1/0/1
 description Trunk to Cat20/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/2
 description Trunk to Cat20/2
 switchport trunk encapsulation dot1q
 switchport mode trunk
 shutdown
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/3
 description Trunk to Cat20/3
 switchport trunk encapsulation dot1q
 switchport mode trunk
 shutdown
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/4
 description trunk to_cat9/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/5
 description Trunk to Cat21g/1_C.8
 switchport trunk encapsulation dot1q
 switchport mode trunk
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/6
 description Trunk to Cat21b/1_C.8
 switchport trunk encapsulation dot1q
 switchport mode trunk
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/7
 description Trunk to Cat301/1_C.8
 switchport trunk encapsulation dot1q
 switchport mode trunk
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
 description Uplink to Cat4506up
 no switchport
 ip address 192.168.34.20 255.255.255.0
 ip ospf hello-interval 2
!
interface GigabitEthernet2/0/1
 description trunk to_cat20/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/2
 description trunk to_cat20/2
 switchport trunk encapsulation dot1q
 switchport mode trunk
 shutdown
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/3
 description trunk to_cat20/3
 switchport trunk encapsulation dot1q
 switchport mode trunk
 shutdown
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/4
 description trunk to_cat9/2
 switchport trunk encapsulation dot1q
 switchport mode trunk
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/5
 description Trunk to Cat21g/1-C.8
 switchport trunk encapsulation dot1q
 switchport mode trunk
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/6
 description Trunk to Cat21b/1-C.8
 switchport trunk encapsulation dot1q
 switchport mode trunk
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/7
 description Trunk to Cat301/1-C.8
 switchport trunk encapsulation dot1q
 switchport mode trunk
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/8
!
interface GigabitEthernet2/0/9
!
interface GigabitEthernet2/0/10
!
interface GigabitEthernet2/0/11
!
interface GigabitEthernet2/0/12
 description Uplink to Cat4506dn
 no switchport
 ip address 192.168.35.20 255.255.255.0
 ip ospf hello-interval 2
!
interface Vlan1
 no ip address
 shutdown
 spanning-tree cost 10
!
interface Vlan152
 description Management
 ip address 192.168.152.1 255.255.255.0
!
interface Vlan156
 description Getewey to ZD.29_C.20
 ip address 192.168.156.1 255.255.255.0
 ip helper-address 192.168.220.7
!
interface Vlan157
 description Getewey to ZD.28_C.9
 ip address 192.168.157.1 255.255.255.0
 ip helper-address 192.168.220.7
!
interface Vlan158
 description Geteway to ZD.32_C49
 ip address 192.168.158.1 255.255.255.0
 ip helper-address 192.168.220.7
!
interface Vlan159
 description Geteway to C.8 ZD.21g,21b,301
 ip address 192.168.159.1 255.255.255.0
 ip helper-address 192.168.220.7
!
interface Vlan172
 description !!!INTERNET!!!_ZD.29
 ip address 172.20.0.1 255.255.0.0
 ip access-group 172 in
 ip access-group 173 out
!
router ospf 10
 router-id 192.168.34.20
 log-adjacency-changes
 auto-cost reference-bandwidth 1000
 passive-interface Vlan152
 passive-interface Vlan156
 passive-interface Vlan157
 passive-interface Vlan158
 passive-interface Vlan159
 network 192.168.34.0 0.0.0.255 area 0
 network 192.168.35.0 0.0.0.255 area 0
 network 192.168.152.0 0.0.0.255 area 0
 network 192.168.156.0 0.0.0.255 area 0
 network 192.168.157.0 0.0.0.255 area 0
 network 192.168.158.0 0.0.0.255 area 0
 network 192.168.159.0 0.0.0.255 area 0
!
router rip
 version 1
 passive-interface Vlan152
 network 192.168.34.0
 network 192.168.35.0
 network 192.168.152.0
 network 192.168.156.0
 network 192.168.157.0
 network 192.168.158.0
 network 192.168.159.0
!
ip classless
no ip forward-protocol udp netbios-ns
no ip forward-protocol udp netbios-dgm
ip route 172.31.0.0 255.255.0.0 192.168.35.4
ip route 172.31.0.0 255.255.0.0 192.168.34.4
no ip http server
ip http secure-server
!
!
logging history debugging
logging trap critical
logging 192.168.44.30
logging 192.168.44.46
logging 192.168.44.47
logging 192.168.44.48
logging 192.168.32.132
access-list 32 remark SNMP access for NMS
access-list 32 permit 192.168.32.132
access-list 172 remark Internet-in
access-list 172 permit ip 172.20.0.0 0.0.255.255 host 172.31.0.4
access-list 173 remark Internet-out
access-list 173 permit ip host 172.31.0.4 172.20.0.0 0.0.255.255
snmp-server community public RO 32
snmp-server community bazgach! RW 32
snmp-server trap-source Vlan152
snmp-server location 29
snmp-server contact C34
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps cluster
snmp-server enable traps fru-ctrl
snmp-server enable traps entity
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps flash insertion removal
snmp-server enable traps port-security
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps bgp
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps hsrp
snmp-server enable traps ipmulticast
snmp-server enable traps msdp
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency
snmp-server enable traps syslog
snmp-server enable traps rtr
snmp-server enable traps mac-notification change move threshold
snmp-server enable traps vlan-membership
snmp-server host 192.168.32.132 version 2c public
snmp-server host 192.168.32.132 version 2c public udp-port 9000
!
control-plane
!
banner login ^CDistribution switch in dCat20^C
alias exec sr sh run
alias exec ct conf t
alias exec tm terminal monitor
alias exec tnm terminal no monitor
!
line con 0
line vty 0 4
 transport input telnet ssh
line vty 5 15
 transport input telnet ssh
!
ntp clock-period 36028955
ntp server 192.168.80.5
end

Код: Выделить всё

Sh ver
Cisco IOS Software, C3750 Software (C3750-IPSERVICESK9-M), Version 12.2(44)SE2, RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Thu 01-May-08 15:42 by antonino
Image text-base: 0x00003000, data-base: 0x017C0000

ROM: Bootstrap program is C3750 boot loader
BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.2(25r)SEE3, RELEASE SOFTWARE (fc1)

dCat20 uptime is 20 hours, 45 minutes
System returned to ROM by power-on
System restarted at 18:21:48 NSK Thu Oct 16 2008
System image file is "flash:c3750-ipservicesk9-mz.122-44.SE2/c3750-ipservicesk9-mz.122-44.SE2.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C3750G-12S (PowerPC405) processor (revision E0) with 0K/12280K bytes of memory.
Processor board ID CAT0751R1LW
Last reset from power-on
7 Virtual Ethernet interfaces
24 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 00:0E:84:C6:96:00
Motherboard assembly number     : 73-8307-07
Power supply part number        : 341-0048-01
Motherboard serial number       : CAT075107TZ
Power supply serial number      : DTH07370AG7
Model revision number           : E0
Motherboard revision number     : A0
Model number                    : WS-C3750G-12S-E
System serial number            : CAT0751R1LW
Top Assembly Part Number        : 800-23419-01
Top Assembly Revision Number    : E0
Hardware Board Revision Number  : 0x07


Switch Ports Model              SW Version            SW Image
------ ----- -----              ----------            ----------
*    1 12    WS-C3750G-12S      12.2(44)SE2           C3750-IPSERVICESK9-M
     2 12    WS-C3750G-12S      12.2(44)SE2           C3750-IPSERVICESK9-M


Switch 02
---------
Switch Uptime                   : 20 hours, 45 minutes
Base ethernet MAC Address       : 00:0F:23:C2:76:00
Motherboard assembly number     : 73-8307-07
Power supply part number        : 341-0048-01
Motherboard serial number       : CAT08030JWD
Power supply serial number      : DTH07520EHY
Model revision number           : E0
Motherboard revision number     : A0
Model number                    : WS-C3750G-12S-E
System serial number            : CAT0803N4D2
Top assembly part number        : 800-23419-01
Top assembly revision number    : E0

Configuration register is 0xF

[zingel]

топологию нарисуйте какие гигабиты с чем соединены и оттуда тоже sh run && sh ver

[hizel]

хушеми следует читать хэшами в причине редактирования
zingel
помоему ты слишком многого хочешь
обычно такая информация закрыта и это правильно

[zingel]

ну можно ведь адресацию убрать, меня волнует только STP как будет ходить и что там в swithcport

[Aramis]

Запарился, рисунок топологии сети не могу воткнуть сюда

[Aramis]

Вообщем топология звезда, уровень доступа 3750 по середине и от неё двумя каналами по 1 Gig идёт на уровень распределения 2950
вот вонфиги 2950

Код: Выделить всё

 Cat20-1#sh ru
Building configuration...

Current configuration : 6310 bytes
!
! Last configuration change at 11:47:29 NSK Fri Oct 17 2008 by mon
!
version 12.1
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
no service password-encryption
no service dhcp
!
hostname Cat20-1
!
logging buffered 16384 warnings
no logging console
aaa new-model
aaa authentication login default local
enable secret 5 $1$MAWv$j8E668QmP6.PSSPdOjORh1
!
username admin password 7 08205E4F041016
username ksg password 7 071D221D1A5B4C55
username mon password 7 1546535A567A
username ava password 7 121803011E0A02
username cwuser privilege 15 password 0 capitalizmnono
username aat password 7 094A451D0B06110B0704
username dpa password 0 namyra8
clock timezone NSK 6
clock summer-time NSK recurring last Sun Mar 3:00 last Sun Oct 3:00
ip subnet-zero
!
ip domain-name nccp.ru
ip name-server 192.168.200.2
ip name-server 192.168.200.11
ip ssh time-out 120
ip ssh authentication-retries 3
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/2
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/3
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/4
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/5
 description Link to ZD.29-3etag k.7
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/6
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/7
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/8
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/9
 description Server C20-Server
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/10
 description !3Hub Montaj/Ushastok!
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/11
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/12
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/13
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/14
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/15
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/16
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/17
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/18
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/19
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/20
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/21
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/22
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/23
 switchport access vlan 156
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/24
 description !INTERNET! OGM
 switchport access vlan 172
 switchport mode access
 switchport port-security
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet0/1
 description Uplink_ to dcat20
 switchport mode trunk
!
interface GigabitEthernet0/2
 description Uplink to dcat20
 switchport mode trunk
!
interface Vlan1
 no ip address
 no ip route-cache
 shutdown
!
interface Vlan152
 description Management
 ip address 192.168.152.2 255.255.255.0
 no ip route-cache
!
ip default-gateway 192.168.152.1
no ip http server
logging trap critical
logging 192.168.44.30
logging 192.168.44.46
logging 192.168.44.47
logging 192.168.44.48
logging 192.168.32.132
logging 192.168.44.27
access-list 32 remark SNMP access for NMS
access-list 32 permit 192.168.32.132
snmp-server engineID local 800000090300000CCEE5B640
snmp-server community public RO 32
snmp-server community bazgach! RW 32
snmp-server location 29
snmp-server contact C34
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps copy-config
snmp-server enable traps syslog
snmp-server enable traps entity
snmp-server enable traps flash insertion removal
snmp-server enable traps bridge
snmp-server enable traps stpx
snmp-server enable traps rtr
snmp-server enable traps c2900
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps MAC-Notification
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps hsrp
snmp-server enable traps cluster
snmp-server enable traps vlan-membership
snmp-server host 192.168.32.132 version 2c public
banner login ^CAccess switch cat20/1 in C20^C
alias exec sr sh run
alias exec ct conf t
!
line con 0
line vty 5 15
!
ntp clock-period 17180238
ntp server 192.168.80.5
!
end

sh ver
Cisco Internetwork Operating System Software
IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA9, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2006 by cisco Systems, Inc.
Compiled Fri 01-Dec-06 18:22 by weiliu
Image text-base: 0x80010000, data-base: 0x8067A000

ROM: Bootstrap program is C2950 boot loader

Cat20-1 uptime is 22 hours, 0 minutes
System returned to ROM by power-on
System restarted at 18:21:03 NSK Thu Oct 16 2008
System image file is "flash:c2950-i6k2l2q4-mz.121-22.EA9.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C2950SX-24 (RC32300) processor (revision F0) with 19958K bytes of memory.
Processor board ID FHK0718Z1EE
Last reset from system-reset
Running Standard Image
24 FastEthernet/IEEE 802.3 interface(s)
2 Gigabit Ethernet/IEEE 802.3 interface(s)

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:0C:CE:E5:B6:40
Motherboard assembly number: 73-8135-06
Power supply part number: 34-0965-01
Motherboard serial number: FOC07180K6T
Power supply serial number: PHI071102WG
Model revision number: F0
Motherboard revision number: A0
Model number: WS-C2950SX-24
System serial number: FHK0718Z1EE
Configuration register is 0xF

В принципе на всех 2950 всё аналогично за исключение имён , адресов и портов которые в других веланах

[hizel]

уважаемый, будьте ласковы, удалите логины\хеши паролей

[Aramis]

уважаемый, будьте ласковы, удалите логины\хеши паролей

Не волнуйтесь логины и пароли изменены

[Гость]

Что, мыслий нету?

[zingel]

я верно понял, что на других коммутаторах включен STP? Сразу вопро: зачем?

[Aramis]

я верно понял, что на других коммутаторах включен STP? Сразу вопро: зачем?

на вех коммутаторах включен STP, а зачем , то затем что соединения транковые и несколько Vlan. По этому STP включен на уровне распределения и уровне доступа.

[zingel]

а STP во всех вланах allow?

[Гость]

а STP во всех вланах allow?

Не понял вопроса, но скажу так. пробывал ограничивать хождение Vlan через порты, всё равно валятся.
Вот пример:
interface GigabitEthernet1/0/2
description Trunk to Cat20/2
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,152,156
switchport mode trunk
spanning-tree link-type point-to-point

[Yam]

вас не смущает, что на транковых интерфейсах, с одной стороны линка portfast, а с другой default?

cat20-1:

Код: Выделить всё

interface GigabitEthernet0/1
description Uplink_ to dcat20
switchport mode trunk

cat20:

Код: Выделить всё

interface GigabitEthernet2/0/1
description trunk to_cat20/1
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree portfast trunk
spanning-tree link-type point-to-point

Кроме того, я рекомендовал бы вообще отказаться от portfast. Покажите sh spanning-tree summary c распределения и ацесса.

[Гость]

По поводу portfast не смущает
Поднял RSTP.
Сейчас поменял 3750 без стека. Буду мониторить , пока вроде порты не падают.

[demon-odinok]

Похоже у Вас в сети есть железяки пользователей с одинаковыми MAC-ами (в разных виланах), из-за этого и флепинг. Попробуйте отследить по макам

[komander]

demon-odinok, и зачем вообще тему подымать годичной давности?
P.S.
А сервак видимо себя в летнем времени ощущает?