思科2960接入华为S5130报错分析

思科2960接入华为S5130报错分析

拓扑：

拓扑介绍：

如图所示，原先架构为华为5130接入到核心5130，有一台思科2960管理口access接5130核心，后新增一台思科2960接入至5130接入，接口配置为trunk，允许vlan200通过。接入后，原2960接入管理口失联，不能ping通。

2960错误日志：

Mar 26 19:05:52.225 BJ: %SPANTREE-7-RECV_1Q_NON_TRUNK: Received 802.1Q BPDU on non trunk GigabitEthernet0/24 VLAN200. 
Mar 26 19:05:52.225 BJ:%SPANTREE-7-BLOCK_PORT_TYPE: Blocking GigabitEthernet0/24 on VLAN0200. Inconsistent port type. Mar 26 19:05:52.230 BJ: %LINEPROTO-5-UPDOWN:Line protocol on Interface Vlan200, changed state to down .
Mar 26 19:31:18.579 BJ: %SPANTREE-2-UNBLOCK_CONSIST_PORT: Unblocking GigabitEthernet0/24 on VLAN0200. Port consistency restored. 
Mar 26 19:31:48.597 BJ: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan200, changed state to up.

日志分析：

在二层网络中，运行生成树协议的交换机之间通过交互BPDU报文进行生成树计算，将环形网络修剪成无环路的树形拓扑。2960报错接收到的bpdu信息是来自trunk口，本地的24口不是trunk。然后将端口给阻塞了。

解决办法：

1、在新2960上将该端口接收bpdu功能关闭

interface GigabitEthernet0/24
 description Manage_Port
 switchport access vlan 200
 spanning-tree bpdufilter enable

2、在老2960上将vlan 200从生成树中剔除

no spanning-tree vlan 200