http://forums.networkinfrastructure.info/nortel-ethernet-switching/slpp-brought-trunk-down/

Cheers!

Thanks for looking in to the issue.
While we polling the 8600 by SNMP the “show sys perf” command shows 100% for a long time (couple minutes)
Log file contains:

CPU5 [11/06/11 17:09:44] SNMP INFO Slpp port down(SlppRxPort = 82, SlppRxVlan =140, SlppIncomingVlanId = 140, SlppSrcMacAddress = 00:e0:7b:88:aa:0c)
CPU5 [11/06/11 17:09:44] SNMP INFO Port 1/19 is an access port
CPU5 [11/06/11 17:09:44] SNMP INFO Link Down(1/19) due to slpp
CPU5 [11/06/11 17:09:44] SW WARNING slppRx: SLPP packet received Rx-Vlan 140, Rx-Port 1/19, PDU-Vlan 140, SRC-Mac 00:e0:7b:88:aa:0c
CPU5 [11/06/11 17:07:03] SNMP INFO Port 1/19 is an access port
CPU5 [11/06/11 17:07:03] SNMP INFO Link Up(1/19)
CPU5 [11/06/11 16:59:33] SNMP INFO Slpp port down(SlppRxPort = 82, SlppRxVlan =140, SlppIncomingVlanId = 140, SlppSrcMacAddress = 00:e0:7b:88:aa:0c)
CPU5 [11/06/11 16:59:32] SNMP INFO Port 1/19 is an access port
CPU5 [11/06/11 16:59:32] SNMP INFO Link Down(1/19) due to slpp
CPU5 [11/06/11 16:59:32] SW WARNING slppRx: SLPP packet received Rx-Vlan 140, Rx-Port 1/19, PDU-Vlan 140, SRC-Mac 00:e0:7b:88:aa:0c
CPU5 [11/06/11 16:56:05] SW INFO user rwa connected from 129.2.70.53 via telnet
CPU5 [11/06/11 16:55:44] SW INFO Closed telnet connection from 129.2.70.53, user rw rcmd -2

It seems that a loop is creating in the network and it raises the cpu util high.
There is no SMLT created in the network but then also user has enabled SLPP on the ports.(not recommended).
Can you please suggest me what action should be taken to resolve the issue.

Regards

Ronit

I’ve seen broadcast storms come and go without explanation. Sometimes it can be a user that creates the problem, and then when the network stops working they unplug and move on, clueless of the chaos they’ve left behind.

The reason I ask about Multicast is because there were a few known issues with 6.1.x were Multicast traffic get’s looped in the switch. I believe there is reference to a fix in 6.1.4 software similar to the following;

Under certain conditions, broadcast traffic looped into the stack could generate a broadcast storm (Q02162104).

You might want to try upgrading the switches to 6.1.4 software and see if that resolves the problem.

Just so I understand your topology, you are using the ERS 5530 switches as distribution switches which feed your edge 470s? So your edge 470s are MLT connected to a single ERS 5530 or are you also running the Advanced License with an IST/SMLT configuration on the ERS 5530.

That’s definitely an odd problem… but a good think that CP-LIMIT is kicking in and isolating the affecting switches or else your entire network might go down. Perhaps you could perform a port mirror of one of the SMLT uplinks out to a desktop/laptop with a continuous packet trace running. Might help you being able to go back and look at the broadcast frames. Perhaps the source MAC might provide some clue to the problem.

Good Luck!

Thanks for the prompt and informative response to my query.

The 8600s are ERS-8610 (5.1.1.1) but we have not yet enabled VRFs, with the smlts connected to 5530-24FTD, (FW:6.0.0.6 SW:v6.1.0.006), with access switches being 470s, with STG enabled on all ports except for their uplinks.

I don’t believe it is a loop or malfunctioning device, as the broadcast storms should not stop once a disable/re-enable the SMLT ports, but should continue to swamp the network, unless the SMLT ports are the loop itself.

Please correct me on by above logic.

We do have Multicast traffic, but the log entry defines it as broadcast.

We run a (Management of a sort) VLAN between the 8600s and 5530s over the SMLT, which is unique to that device’s SMLT.

I could enable SLPP just on that VLAN, and not on all the user VLANs that are spanned over that SMLT.

I have checked the SMLT configuration, but that has been stable for over a year up until now that is.

My CP Limit is 10 000, but I am about to enable rate limiting for multi and broad traffic.

Thanks once again

Ryan

It would appear that CP-LIMIT is kicking in and shutting down the links in question because they are flooding too many broadcast frames into the core network. Just to be upfront with you 11,201 pps is a LOT of broadcast traffic. The default value for CP-LIMIT is 10000, however, I personally use 5,000 in my network.

I haven’t used SLPP in more than 10 VLANs at any one site because I generally only enable it on a few larger VLANs. I’d recommend you review the design guidelines to see if there are any hard/soft limits.

With respect to your symptoms, there is definitely something wrong somewhere. Perhaps it’s an operational bug in the software or perhaps it’s mis-configuration or perhaps a cabling issue (loop) or a mis-behaving device.

I would start with the basics and make sure your edge switch has a good configuration. You should confirm that the MLT trunk on the edge switch is configured properly (and ENABLED). You should also enable rate-limiting and confirm that STP is enabled on all edge ports. Assuming your configuration is good we need to look at either a software issue or a potentially mis-behaving device on the network.

What model edge switches are you using?
What version of software are they running?
Are you doing any IGMP/Multicast?

I believe I remember reading a blurb in some release notes about an issue with a broadcast storm emanating from an edge switch although I believe it had something to-do with Multicast traffic.

Good Luck!

I have two 8600s connected via IST, and upon late I have ports shutdown from with the following Error code :

CPU WARNING Shutdown port 2/19 due to excessive control frames multicast 0, broadcast 11201 packet per second

We have 4 ports configured in a SMLT trunk, two links to each 8600, and all four ports are being closed with the above message.

I disable and reenable the ports, and all is well again. The ports get shutdown over random days long periods.

Now, I am considering implementing SLPP to assist in this issue. But reading an above entry of yours about VLANs, my network is subnetted to each switch stack, without a single management VLAN per se, and switch IPs are resident in their applicable subnet.

I have about 80 or so VLANs on site, and I am curious about the number of VLANs associated with SLPP, and is there any other limitiations, I should be aware of?

Thanks in advance.

Regards

Ryan

Let me ask and then answer a simple question that should help explain SLPP;

Q. How will SLPP (Simple Loop Protection Protocol) save your network?
A. It will save you if you have an edge switch that boots with a default factory configuration where there is no MLT configured (can you say loop).
It will save you if you configure the MLT but forget to enable the MLT (don’t laugh it’s been done too many times).

It won’t save you from someone mistakenly looping two ports in the closet, you’ll need to rely on other features (BPDU guard, STP) to save you there.

How do you handle IP telephony? Well there are literally dozens of articles on this blog for you to peruse. I would start with this one that details a best practice configuration when configuring an edge switch. The commands have only been tested on a 5520 series switch but they should probably work with the 4500 series and I believe ADAC/LLDP-MED is now supported on the 4500 series switches (the 5520 was the only switch for a long time that support ADAC/LLDP-MED).
http://blog.michaelfmcnamara.com/2007/10/nortel-ers-5520-pwr-switch/

Spanning Tree should be set to FastStart on all edge ports and disabled on any uplinks/downlinks. You still need Spanning Tree enabled even if the port is connecting to an IP phone because you can still get a loop from an IP phone with the built-in PC port on the back of the phone.
I won’t go on to far… I’ve gotten off-topic already with respect to SLPP. If you have any other questions please post in the forums and I’ll be sure to follow-up with you. http://forums.networkinfrastructure.info/nortel-ethernet-switching/

Cheers!

What version of software are you running? I’m assuming your using Ethernet Routing Switch 8600s and not the 5000 series?

Assuming that the software release is fine, no bugs or known issues I would suspect the possibility of a brief loop within the specific switch/stack that connects to the offending port.

Have you checked the configuration of every port and every device that connects to the switch/stack that is having issues? I would advise you make sure you have Spanning Tree enabled on all edge ports within that switch/stack. You might also want to enable BPDU guard to help keep any un-authorized switches from being connected downstream which could then cause a loop depending on the scenario. For those that are following the thread here’s a quick example of the SLPP messages that the ERS8600 switch will generate;

CPU6 [12/18/08 07:38:09] SW WARNING slppRx: SLPP packet received Rx-Vlan 12, Rx-Port 1/3, PDU-Vlan 12, SRC-Mac 00:15:e8:a8:00:0c
CPU6 [12/18/08 07:38:09] SNMP INFO Link Down(1/3) due to slpp
CPU6 [12/18/08 07:38:09] SNMP INFO Slpp port down(SlppRxPort = 66, SlppRxVlan =12, SlppIncomingVlanId = 12, SlppSrcMacAddress = 00:15:e8:a8:00:0c)

What do the logs from the edge switch indicate when you correlate the events in the core?

Please feel free to post the logs from both the core switch and the edge switch over in the forums and I’ll try to follow-up for you.
http://forums.networkinfrastructure.info/nortel-ethernet-switching/

Cheers!

I have a problem with slpp.

I have the same vlan for 3 different smlt, and i’m receiving slpp frames on one of the smlts with a 3 day interval.

What can be the problem?

Regards,

LR