Page 1 of 1

Spanning Tree Issue on OS6360

Posted: 27 Mar 2025 04:45
by element1064
Good day can anyone maybe help or advise

I have a customer running on OS6360, OS2360 and OS2260 switches, the OS6360 switches are running on version 8.10.105.R02 and its only the OS6360 switches seeming to be an issue. All switches Spanning Tree are set to Per VLAN but it seems the OS6360 after a few days keep on setting the Spanning Tree mode to RSTP automatically causing the ports the Wi-Fi AP's are connected too, to go into blocking mode and the Wi-Fi stops working. When I change it back to Per VLAN all starts working again. Why will this happen on the OS6360 switches?

Please see screenshot attached and config below

system name "Maytex_Nottingham"
system location "QA_Department"

! Configuration:
configuration error-file-limit 2

! Capability Manager:
! Virtual Flow Control:
! LFP:
! Interface:
! Port_Manager:
! Link Aggregate:
! VLAN:
vlan 1 admin-state enable
vlan 10 admin-state enable
vlan 10 name "Data-10"
vlan 50 admin-state enable
vlan 50 name "Textile_Office-50"
vlan 60 admin-state enable
vlan 60 name "Textile_WMS-60"
vlan 70 admin-state enable
vlan 70 name "Textile_Guest-70"
vlan 80-81 admin-state enable
vlan 80 name "Textile-80"
vlan 81 name "Textile-81"
vlan 100-101 admin-state enable
vlan 100 name "Maytex_WLAN"
vlan 101 name "CCTV-101"
vlan 160 admin-state enable
vlan 160 name "Management-160"
vlan 869 admin-state enable
vlan 869 name "Voice-869"
vlan 100 members port 1/1/4 untagged
vlan 160 members port 1/1/25-26 untagged
vlan 10 members port 1/1/25-26 tagged
vlan 50 members port 1/1/4 tagged
vlan 50 members port 1/1/25-26 tagged
vlan 60 members port 1/1/4 tagged
vlan 60 members port 1/1/25-26 tagged
vlan 70 members port 1/1/4 tagged
vlan 70 members port 1/1/25-26 tagged
vlan 80 members port 1/1/4 tagged
vlan 80 members port 1/1/25-26 tagged
vlan 81 members port 1/1/4 tagged
vlan 81 members port 1/1/25-26 tagged
vlan 100 members port 1/1/25-26 tagged
vlan 101 members port 1/1/25-26 tagged
vlan 869 members port 1/1/25-26 tagged

! PVLAN:
! Spanning Tree:
spantree vlan 1 admin-state enable
spantree vlan 10 admin-state enable
spantree vlan 50 admin-state enable
spantree vlan 60 admin-state enable
spantree vlan 70 admin-state enable
spantree vlan 80 admin-state enable
spantree vlan 81 admin-state enable
spantree vlan 100 admin-state enable
spantree vlan 101 admin-state enable
spantree vlan 160 admin-state enable
spantree vlan 869 admin-state enable

! DA-UNP:
unp profile "Data-10"
unp profile "Voice-869"
unp profile "defaultWLANProfile"
unp profile "Data-10" map vlan 10
unp profile "Voice-869" map vlan 869
unp profile "defaultWLANProfile" map vlan 100
unp port-template "DataDefault" direction both default-profile "Data-10" classification trust-tag ap-mode admin-state enable
unp port 1/1/1-3 port-type bridge
unp port 1/1/1-3 port-template "DataDefault"
unp port 1/1/5-23 port-type bridge
unp port 1/1/5-23 port-template "DataDefault"
unp port 1/1/24 port-type bridge
unp port 1/1/24 port-template "bridgeDefaultPortTemplate"
unp classification-rule "Voice-869"
unp classification-rule "Voice-869" Profile1 "Voice-869"
unp classification-rule "Voice-869" lldp med-endpoint IP-Phone

! Bridging:
! Port Mirroring:
! Port Mapping:
! IP:
ip interface "Management-160" address 192.168.160.14 mask 255.255.255.0 vlan 160 ifindex 1

! IPv6:
! IPSec:
! IPMS:
! AAA:
aaa authentication default "local"
aaa authentication console "local"
aaa tacacs command-authorization disable

! NTP:
ntp server 192.168.160.1 minpoll 4 iburst prefer
ntp client admin-state enable

! TCAM Manager:
! QOS:
! Policy Manager:
! VLAN Stacking:
! ERP:
! MVRP:
! LLDP:
lldp network-policy 1 application voice vlan 869 l2-priority 5 dscp 46
lldp nearest-bridge chassis tlv med network-policy enable
lldp chassis med network-policy 1

! UDLD:
! Server Load Balance:
! High Availability Vlan:
! Session Manager:
session cli timeout 30
session ftp timeout 30
session http timeout 30
session prompt default "QA_Department ->"

! Web:
! Trap Manager:
! Health Monitor:
health threshold memory 80

! System Service:
ip domain-name google.co.za
ip name-server 8.8.8.8 1.1.1.1
ip domain-lookup
system timezone SAST

! SNMP:
! BFD:
! IP Route Manager:
ip static-route 0.0.0.0/0 gateway 192.168.160.254 metric 1

! VRRP:
! UDP Relay:
! RIP:
! OSPF:
! IP Multicast:
! DVMRP:
! IPMR:
! RIPng:
! OSPF3:
! BGP:
! ISIS:
! Module:
! LAN Power:
! RDP:
! DHL:
! Ethernet-OAM:
! SAA:
! SPB-ISIS:
! SVCMGR:
! EVB:
! APP-FINGERPRINT:
! FCOE:
! QMR:
! OPENFLOW:
! Dynamic auto-fabric:
auto-fabric admin-state enable

! SIP Snooping:
! DHCP Server:
! DHCPv6 Relay:
! DHCPv6 Snooping:
! DHCPv6 Server:
! DHCP Message Service:
! DHCP Active Lease Service:
! Virtual Chassis Split Protection:
! DHCP Snooping:
! APP-MONITORING:
! Loopback Detection:
! VM-SNOOPING:
! PPPOE-IA:
! Security:
! Zero Configuration:
! MAC Security:
! OVC:
cloud-agent admin-state enable
cloud-agent discovery-interval 5

! EFM-OAM:
! ALARM-MANAGER:
! DEVICE-PROFILE:
! PTP:
! IP DHCP RELAY:
! TEST-OAM:
! LOOPBACK TEST:
! UDP6 RELAY:
! MGMT AGENT:
! MRP:
! PKGMGR:
! SITEMGR:
! SWLIC:
! MPLS:
! LDP:
! PROFINET:

Re: Spanning Tree Issue on OS6360

Posted: 27 Mar 2025 15:41
by Cristek
I'd start with disabling auto-fabric. I've seen it cause strange things.
Anyhow, what's connected to 1/1/4? That port is not under your UNP rules and that's the port you are experiencing the issue on according to your screenshot.
Is this happening only for vlan 100?

Re: Spanning Tree Issue on OS6360

Posted: 28 Mar 2025 02:59
by element1064
on port 1/1/4 is a Unify AP and VLAN 100 is the WLAN VLAN, I removed UNP for the Wi-Fi as it seems it causes issues on the Unify AP's. It seems like the Unify AP's dont like UNP, yes and it happens only for VLAN 100. I did notice on Omnivista Cirrus that it states the firmware the 6360 is running on is a problematic version. I have never seen this issue before so I am lost. So you think I should disable Auto-fabric?

Re: Spanning Tree Issue on OS6360

Posted: 28 Mar 2025 09:56
by Cristek
Upgrading to the latest version is always a good idea obviously :)
And assuming you posted all the config, you don't have a classification rule for that Unifi AP so the AP would go into vlan 10 and not 100.
Also the defaultWLANProfile profile is only designed to work with ALE APs (at least that's how I understand it). I believe you'd have to classify the AP's mac into vlan 100 and then classify ingress vlan tags into their respective profiles.
Do you perhaps have wireless phone on the wifi?
Does the issue still happens when you are not using UNP on 1/1/4?

Re: Spanning Tree Issue on OS6360

Posted: 31 Mar 2025 08:38
by element1064
The ports the AP's are connected too are manually configured so the default VLAN for the AP's are VLAN 100 and then VLAN 10, 50, 60, 70, 80 and 81 is tagged over the same port. And yes even with the manual config the port goes into Blocking mode. What I want to know is why will the switch change the Spanning Tree mode from Per VLAN to RSTP by itself and then block the AP ports?