[Demius]

Не пойму проблему, подключили новую железку, поставили настроили порты trunk при подключении к другому свичу всё работает. Но при подключении в рабочую сеть, линк который подключен в сеть рабочую, начинает то отключаться то подключаться на свиче, вот лог с консоли:

 

Jan 01 02:07:58 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet1/26, changed state to UP
%Jan 01 02:07:59 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1,changed state to UP
%Jan 01 02:07:59 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan4,changed state to UP
%Jan 01 02:08:29 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet1/26, changed state to DOWN
%Jan 01 02:08:29 2006 %LINK-5-CHANGED: Interface Ethernet1/26, changed state to administratively DOWN
%Jan 01 02:08:29 2006 Port Ethernet1/26 has been shutted.
%Jan 01 02:08:29 2006 IP 10.31.0.1 connected with Port Ethernet1/26 has been prohibited.
%Jan 01 02:08:29 2006 IP 10.31.2.1 connected with Port Ethernet1/26 has been prohibited.
%Jan 01 02:08:29 2006 IP 10.31.2.50 connected with Port Ethernet1/26 has been prohibited.
%Jan 01 02:08:30 2006 IP 10.31.0.50 connected with Port Ethernet1/26 has been prohibited.
%Jan 01 02:08:30 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1,changed state to DOWN
%Jan 01 02:08:30 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan4,changed state to DOWN
%Jan 01 02:08:30 2006 IP 10.32.0.1 connected with Port Ethernet1/26 has been prohibited.
%Jan 01 02:08:30 2006 IP 10.31.10.100 connected with Port Ethernet1/26 has been prohibited.
%Jan 01 02:08:30 2006 IP 10.31.2.150 connected with Port Ethernet1/26 has been prohibited.
%Jan 01 02:08:30 2006 IP 10.31.0.150 connected with Port Ethernet1/26 has been prohibited.
%Jan 01 02:08:31 2006 IP 10.31.10.200 connected with Port Ethernet1/26 has been prohibited.
%Jan 01 02:08:31 2006 IP 10.31.0.200 connected with Port Ethernet1/26 has been prohibited.

 

Кто что может сказать?

[azhur]

%Jan 01 02:08:29 2006 %LINK-5-CHANGED: Interface Ethernet1/26, changed state to administratively DOWN

ИМХО самый вероятный вариант - что-то типа bpduguard (STP).

[dnvk]

2Demius,

 

есть ли в конфиге "anti-arpscan enable"?

 

Должно помочь:

Interface Ethernet1/26
anti-arpscan trust supertrust-port

[Demius]

Большое спасибо.