Wired Intelligent Edge

 View Only

  • 1.  STP Block Port with IP-Phone connected

    Posted Feb 06, 2018 04:30 AM

    Hello,

    i have attached a IP-Phone (tagged vlan 1540)  to my HP 2920 48G-PoE. The Phone got 1 PC-Port to attach a PC behind the Phone.

    Port Authentication against Radius is active. Pohne is working well. If i attach a PC to the Phone , then the Switchport on 2920 got blocked. What do i need to change ?

    Port Konfig:

    tagged vlan 1540
    untagged vlan 1520
    aaa port-access authenticator
    aaa port-access authenticator unauth-vid 1
    loop-protect
    exit

    LOG:

    I 02/06/18 10:05:01 00435 ports: ST2-CMDR: port 2/7 is Blocked by STP
    I 02/06/18 10:05:00 00435 ports: ST2-CMDR: port 2/7 is Blocked by AAA
    I 02/06/18 10:05:00 00435 ports: ST2-CMDR: port 2/7 is Blocked by STP
    I 02/06/18 10:04:59 00435 ports: ST2-CMDR: port 2/7 is Blocked by AAA
    I 02/06/18 10:04:59 00435 ports: ST2-CMDR: port 2/7 is Blocked by STP

     

    Thanks in advance.



  • 2.  RE: STP Block Port with IP-Phone connected

    Posted Feb 06, 2018 06:25 AM

    Hello

    Just a wild guess, try to set the client limit too 2.

    kind regards

     



  • 3.  RE: STP Block Port with IP-Phone connected

    Posted Feb 06, 2018 07:49 AM
    wrote:

    Hello

    Just a wild guess, try to set the client limit too 2.

    kind regards

     

    Yep, that should do it.

    The problem you see is not STP, it's that the phone and the pc continuously try to authenticate and the port goes through the process of coming up.
    You probably also see that in the RADIUS log



  • 4.  RE: STP Block Port with IP-Phone connected

    Posted Feb 07, 2018 04:52 AM

    This was quit easy. Thank you very much. It´s working now.

    Kind regards,

    Ralph



Related Content