端口出现err-disabled现象的解决方法合集

端口出现「-现象er disabled端口出现现象err-disabled关于接口处于err-disable的故障排查故障症状线路不通，物理指示灯灭或者显示为橙色不同平台指示灯状态不同show interface输出显示接口状态接口状态是FastEthernetO/47is down,line protocolis downerr-disabled e「r-disableswl#show interfacesstatusPort NameStatus VianDuplex SpeedTypeFaO/47err-disabled1auto auto10/100BaseTX如果出现了接口状态为命令能查看触发err-disable,show interfacesstatus err-disablederr-disable的原因下面示例原因为bpduguard,在连接了交换机的端口配置了spanning-tree bpduguardenableoswl#show interfacesstatus err-disabledPort NameStatus ReasonFaO/47err-disabled bpduguard接口产生err-disable的原因可以由以下的命令来查看，系统缺省的配置是所有列出的原因都能导致接口被置为err-disableswl#show errdisabledetectErrDisable ReasonDetection statusudldEnabledbpduguard Enabledsecurity-violatio Enabledchannel-misconfig Enabledpsecure-violation Enableddhcp-rate-limit Enabledunicast-flood EnabledvmpsEnabledpagp-flap Enableddtp-flap Enabledlink-flap EnabledI2ptguard Enabledgbic-invalid EnabledloopbackEnableddhcp-rate-limit Enabledunicast-flood Enabled从列表中,我们可以看出常见的原因有以及等udld,bpduguard,link-flap loopback具体由什么原因导致当前接口6「「-55北9可以由show interfacestatus err-disable来查看在接口模式下采用shutdown,nshutdown进行手动的激活在缺省配置下，一旦接口被置为将不会试图恢复接口err-disable,IOS这个可以由show errdisable recovery来查看，timer status下面所有的值都是disable下面的示例中，由于手工配置了恢复，所以的值变为bpduguard timerstatus Enableswl#show errdisable recoveryErrDisable ReasonTimer Statusudld DisabledbpduguardEnabled security-violatio Disabledchannel-misconfig DisabledvmpsDisabled pagp-flap Disableddtp-flap Disabledlink-flap DisabledI2ptguard Disabledpsecure-violation Disabledgbic-invalid Disableddhcp-rate-limit Disabledunicast-flood DisabledloopbackDisabledTimer interval:300secondsInterfaces thatwill beenabled atthe nexttimeout:Interface Errdisablereason TimeleftsecFaO/47bpduguard217配置IOS重新激活errdisable的接口，使用以下命令swlconfig#errdisable recoverycause bpduguardswlconfig#errdisablerecoverycauseall Enable timer to recover fromall causesbpduguardEnable timer to recover from BPDUGuard error disable statechannel-misconfig Enable timer to recover fromchannel misconfigdisable statedhcp-rate-limit Enabletimer to recover fromdhcp-rate-limit errordisable statedtp-flapEnable timer to recover from dtp-flap errordisable stategbic-invalid Enabletimer torecover from invalidGBIC errordisable stateI2ptguard Enabletimer torecover fromI2protocol-tunnel errordisable statelink-flap Enabletimer torecover fromlink-flaperror disable state loopbackEnabletimer torecover from loopbackdetected disablestatepagp-flap Enabletimer torecoverfrompagp-flap errordisable statepsecure-violation Enabletimertorecoverfrompsecure violationdisable statesecurity-violation Enabletimertorecoverfrom

802.lx violationdisable stateudld Enabletimertorecoverfrom udlderrordisablestateunicast-flood Enabletimertorecoverfromunicast flooddisable statevmpsEnabletimertorecoverfrom vmpsshutdown errordisable配置完上述命令后，在一段时间后试图恢复被置为的接口，这段时间缺省为IOS err-disable300秒但是，如果引起err-disable的源没有根治，在恢复工作后，接口会再次被置为err-disable调整err-disable的超时时间，可以使用以下命令swlconfig#errdisablerecoveryinterval30-86400timer-intervalsec可以调整在秒，缺省是秒30—86400300如果产生的原因是下面有一条命令非常管用err-disable udld,swl#udld resetNoports aredisabled byUDLD.同时，接口在被置为err-disable的时候，通常有一系列的日志产生，如下*Mar1515:47:

19.984:%SPANTREE-2-BLOCK BPDUGUARD:Received BPDUonport FastEthernetO/47with BPDUGuard enabled.Disabling port.swl#*Mar1515:47:

19.984:%PM-4-ERR_DISABLE:bpduguard errordetected onFaO/47,putting FaO/47in err-disablestateswl#*Mar1515:47:

21.996:%LINK-3-UPDOWN:Interface FastEthernetO/47,changedstate todown收集这些日志也非常管用所以建议配置一个收集信息syslog server,logswl#show interfacesstatusPort NameStatus VianDu...开启功能，这样可以使用来查看引发的原因是什么,errdisable show errdisable errdisable再更加信息内容进行解决你要是想不影响使用的话，先用no errdisabledetect causeloopback执行一下，将已经死掉的端口，nosh一下如果没问题，肯定是环路了，你可再找时间，对怀疑有问题的用拔插法，一个一个拔掉网switch线去查，当然，有更有效的方法，你可查看有问题的的所有和口的状态，哪个有switch045gierrdisable信息哪个就有问题switch#show interfacesstatus err-disabledPort NameStatus ReasonFaO/22err-disabled link-flapFaO/37For officein100K err-disabled link-flapFa0/41unknow err-disabled link-flap FaO/42Training Dc066err-disabled link-flapFaO/45Production lineVM err-disabled link-flap switch#showerrdisabledetectErrDisable ReasonDetection statuspagp-flap Enableddtp-flap Enabledlink-flap EnabledI2ptguard Enabledgbic-invalid EnabledloopbackEnabledPort NameStatus Reasonswitch#show interfacesstatus err-disabledFaO/22err-disabled link-flapFaO/37For officein100K err-disabled link-flapFa0/41unknow err-disabled link-flapFaO/42Training Dc066err-disabled link-flapFaO/45Production lineVM err-disabled link-flapswitch#sh errdisableflap-valuesErrDisable ReasonFlaps Timesecpagp-flap330dtp-flap330link-flap510（link-flap这就是因为链路质量不好导致的）关闭errdisable detectswitch#no errdisabledetect causeall。