If you're having packet loss (sporadic), run: show spanning-tree bridge
on the SRX and confirm that your topology is actually stable - look for topology age. Cheers, Ben On 20/11/2012, at 4:07 PM, Jonathan Lassoff <[email protected]> wrote: > The other that that comes to mind for me is security policy. > > Is it possible that there could be security policy in place that > blocks flows in the topology that is formed when your SRX is root? > > Cheers, > jof > > On Mon, Nov 19, 2012 at 9:55 PM, Jeff Wheeler <[email protected]> wrote: >> On Mon, Nov 19, 2012 at 6:04 PM, Ali Sumsam >> <[email protected]> wrote: >>> If I try to set the priority on one of the SRX110 to become root bridge, >>> MSTP seems to be converged but there are huge packet losses in the network. >>> I removed the priority and one of the cisco2970 became root and then >>> everything seems to be fine. No packet loss after that. >> >> Just taking a wild guess here, but does the SRX110 have enough >> forwarding performance, and enough port speed, to switch all of the >> traffic between your 2970s? Check the CPU usage and link headroom >> when the SRX is root. Unless you manipulate your port costs, the >> configuration you suggested would have traffic going >> 2970#1---SRX110---2970#2. >> >> -- >> Jeff S Wheeler <[email protected]> >> Sr Network Operator / Innovative Network Concepts >> _______________________________________________ >> juniper-nsp mailing list [email protected] >> https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
