OcNOS DC : Layer 2 Guide : Layer 2 Configuration : ErrDisable for Storm-Control Configuration
ErrDisable for Storm-Control Configuration
An interface port state becomes ErrDisable when it continuously receives BUM traffic which is discarded due to storm control settings. Consequently, the port is down and does not allow or receive any traffic. The ErrDisable state is changed either manually by shut/no shut the interface or automatically through setting timeout value.
Note:  
An interface discards BUM traffic during the specified interval to complete one discard-hit cycle.
The LED does not glow when an interface is in the ErrDisable state.
ErrDisable is supported only on physical interfaces.
A LAG interface does not go into the ErrDisable state when all of its member ports are in the ErrDisable state
The error disable computation is based on a sliding window of time. The window size is configurable in seconds. This window is taken as the current time to the last <t> second, where <t> is the configured window size. Every 5 seconds, a discard hit count increases if there is BUM traffic being discarded in that period. If the accumulated discard hit count reaches the maximum count for a particular configurable sliding window, a storm control error disable fault is triggered.
Topology
ErrDisable
Automatic Recovery
By default, an interface goes into the ErrDisable state when there is 1 discard hit in 5 seconds. An interface is recovered from the ErrDisable state when the configured non-zero errdisable time-out interval value expires.
RTR1
 
#configure terminal
Enter configure mode.
(config)#errdisable cause storm-control
Enable ErrDisable due to storm-control
(config)#errdisable storm-control discard-hit 2 time 30
Configure Storm control settings. Max discard hit count and interval for stormControl Timer
(config)#errdisable timeout interval 50
Configure interval to recover from error disable state
(config)#commit
Commit the candidate configuration to the running configuration.
(config)#exit
Exit interface mode
Note: Automatic recovery timeout is disabled, if you configure errdisable timeout interval 0 .
 
Validation
#show errdisable details
Storm Control Timer Interval : 30 secs
Storm Control allowed Max. discard-hit count : 2
 
ErrDisable Cause Status
---------------- ------
Link-Flap Disabled
Storm-Control Enabled
Lag-Mismatch Disabled
Stp-Bpdu-Guard Enabled
Mac-move-limit Disabled
 
Note: Stp-Bpdu-Guard is enabled by default on the global level configuration.
 
#show interface errdisable status
Interfaces that will be enabled at the next timeout
 
Interface ErrDisable Cause Time left(secs)
--------- ---------------- ---------------
xe11 storm-control 38
 
 
#show interface brief | include ED
ED - ErrDisabled, PD - Protocol Down, AD - Admin Down, IA - InActive
xe11 ETH -- -- down ED 10g -- No No
#
Note: Interface xe11 went into the ErrDisable state after discarding packets 2 times (5 second windows are considered) in 30 seconds.
 
Log Message
 
Edge1-SiteX#configure terminal
Enter configure mode.
Edge1-SiteX(config)#logging level nsm 4
Enable Operational log to display recovery message
Edge1-SiteX(config)#commit
Commit the candidate configuration to the running configuration.
Edge1-SiteX(config)#exit
Exit interface mode
 
2017 Sep 18 11:52:12 : NSM : CRITI : [IFMGR_IF_DOWN_2]: Interface xe11 changed state to down
(config-if)#no shut
(config-if)#2017 Sep 18 11:52:15 : NSM : CRITI : [IFMGR_IF_UP_2]: Interface xe11 changed state to up
2017 Sep 18 11:52:15 : NSM : WARN : [VXLAN_OPR_ACCESSPORT_UP_4]: VXLAN Access port on xe11 is up
2017 Sep 18 11:52:15 : NSM : CRITI : [IFMGR_ERstorm-controlR_DISABLE_DOWN_2]: Interface xe11 moved to errdisable state due to storm-control
2017 Sep 18 11:52:15 : NSM : CRITI : [IFMGR_IF_DOWN_2]: Interface xe11 changed state to down
 
Note: Interface xe11 recovered from the ErrDisable state after a 50 second time-out.
Manual Recovery
An interface can be recovered manually from the ErrDisable state, by executing the CLIS shutdown which recovers the interface from ErrDisable state, followed by no shutdown that brings the interface to an up state.
RTR1
 
#configure terminal
Enter configure mode.
(config)#errdisable cause storm-control
Enable errdisable due to storm-control
(config)#errdisable storm-control discard-hit 3 time 20
Configure Storm control settings. Max discard hit count and interval for StormControl Timer
(config)#commit
Commit the candidate configuration to the running configuration.
(config)#exit
Exit interface mode
 
Validation
#show running-config | include errdisable
errdisable cause storm-control
errdisable storm-control-setting max-flaps 3 time 20
errdisable cause stp-bpdu-guard
 
#show errdisable details
 
Link Flap Timer Interval : 20 secs
Link Flaps allowed Max. count : 3
 
ErrDisable Cause Status
---------------- ------
Link-Flap Disabled
Storm-Control Enabled
Lag-Mismatch Disabled
Stp-Bpdu-Guard Disabled
Mac-move-limit Disabled
 
Note: Interface xe11 went into the ErrDisable state after discarding packets 3 times (5 second windows are considered) in 20 seconds.
 
(config)#do show interface errdisable status
Interfaces that will be enabled at the next timeout
Interface ErrDisable Cause Time left(secs)
--------- ---------------- ---------------
xe11 storm-control NA
(config)#do show int brief | include ED
ED - ErrDisabled, PD - Protocol Down, AD - Admin Down, IA - InActive
xe11 ETH -- -- down ED 10g -- No No
 
Note: Interface xe11 recovered from the ErrDisable state after entering shutdown followed by no shutdown.
 
(config)#interface xe11
(config-if)#shutdown
2017 Sep 18 13:02:20 : NSM : WARN : [IFMGR_ERR_DISABLE_UP_4]: Interface xe11 recovered from storm-control errdisable
(config-if)#no shut
(config-if)#2017 Sep 18 13:02:21 : NSM : CRITI : [IFMGR_IF_UP_2]: Interface xe11 changed state to up
2017 Sep 18 13:02:21 : NSM : WARN : [VXLAN_OPR_ACCESSPORT_UP_4]: VXLAN Access port on xe11 is up
 
config)#do show interface errdisable
(config)#do show interface brief | include ED
ED - ErrDisabled, PD - Protocol Down, AD - Admin Down, IA - InActive
(config)#
If you configure no errdisable cause storm-control, at the global level, it recovers all the interfaces from the ErrDisable state
Errdisable at the Interface Level
If you enable errdisable globally, by default all physical interfaces enable storm-control errdisable. To turn off errdisable for an interface, configure the commands below.
 
#configure terminal
Enter configure mode.
(config)#interface xe11
Enter into interface level
(config-if)#no storm-control errdisable
Disable storm-control errdisable for interface
(config)#commit
Commit the candidate configuration to the running configuration.
(config)#exit
Exit interface mode
Note: If you configure “no storm-control errdisable” in interface level, either it won’t allow the interface move to errdisable state or it will recover interface from errdisable state
Validation
#show run int xe11
!
interface xe11
description *1/2 member of PO3 - Connected to IXIA 6/6*
channel-group 3 mode active
no storm-control errdisable
!
 
Sample show running-config Output
Global level configuration
 
ocnos#
ocnos#con t
Enter configuration commands, one per line. End with CNTL/Z.
ocnos(config)#
ocnos(config)#errdisable cause storm-control
ocnos(config)#commit
ocnos(config)#end
ocnos#
ocnos#show errdisable details
 
Storm Control Timer Interval : 5 secs
Storm Control Max. discard-hit count : 1
 
 
ErrDisable Cause Status
---------------- ------
Link-Flap Disabled
Storm-Control Enabled
Lag-Mismatch Disabled
Stp-Bpdu-Guard Enabled
Mac-move-limit Disabled
ocnos#
ocnos#show running-config | include err
errdisable cause storm-control
errdisable cause stp-bpdu-guard
ocnos#
 
ocnos(config)#no errdisable cause storm-control
ocnos(config)#commit
ocnos(config)#end
ocnos#
ocnos#show running-config | include err
errdisable cause stp-bpdu-guard
 
 
 
 
 
Interfcae level configuration
 
ocnos#
ocnos(config)#
ocnos(config)#errdisable cause storm-control
ocnos(config)#commit
ocnos(config)#end
ocnos#
ocnos#
Enter configuration commands, one per line. End with CNTL/Z.
ocnos(config)#
ocnos(config)#interface ce21
ocnos(config-if)#no in
ocnos(config-if)#no storm-control errdisable
ocnos(config-if)#commit
ocnos(config-if)#ssto
ocnos(config-if)#storm-control errdisable
ocnos(config-if)#commit
ocnos(config-if)#end
ocnos#
ocnos#
ocnos#show running-config interface ce21
!
interface ce21
storm-control errdisable
!
ocnos#
ocnos#
ocnos#
ocnos#show running-config | include err
errdisable cause storm-control
errdisable cause stp-bpdu-guard
ocnos#
ocnos#
ocnos#
ocnos#
ocnos#con t
Enter configuration commands, one per line. End with CNTL/Z.
ocnos(config)#
ocnos(config)#no sto
ocnos(config)#no errdisable et
ocnos(config)#no errdisable cause storm-control
ocnos(config)#commit
ocnos(config)#end
ocnos#
ocnos#
ocnos#
ocnos#show running-config | include err
errdisable cause stp-bpdu-guard
ocnos#
Discardhit configuration
ocnos#
ocnos#con t
Enter configuration commands, one per line. End with CNTL/Z.
ocnos(config)#errdisable cause storm-control
ocnos(config)#commit
ocnos(config)#end
ocnos#
ocnos#show running-config | include err
errdisable cause storm-control
errdisable cause stp-bpdu-guard
ocnos#
ocnos#con t
Enter configuration commands, one per line. End with CNTL/Z.
ocnos(config)#errdisable storm-control discard-hit 3 time 30
ocnos(config)#commit
% Warning: Err-disable setting has being updated, previous flaps won't be considered
ocnos(config)#end
ocnos#
ocnos#show running-config | include err
errdisable cause storm-control
errdisable cause stp-bpdu-guard
errdisable storm-control discard-hit 3 time 30
ocnos#
ocnos#con t
Enter configuration commands, one per line. End with CNTL/Z.
ocnos(config)#no errdisable cause storm-control
ocnos(config)#commit
ocnos(config)#end
ocnos#
ocnos#show running-config | include err
errdisable cause stp-bpdu-guard
ocnos#
Time interval Comnfiguration
 
ocnos#con t
Enter configuration commands, one per line. End with CNTL/Z.
ocnos(config)#errdisable to
ocnos(config)#errdisable timeout interval 10
ocnos(config)#commit
ocnos(config)#end
ocnos#
 
ocnos#show running-config | include err
errdisable cause stp-bpdu-guard
errdisable timeout interval 10
ocnos#
 
ocnos#con t
Enter configuration commands, one per line. End with CNTL/Z.
ocnos(config)#no errdisable timeout im
ocnos(config)#no errdisable timeout interval
ocnos(config)#commit
ocnos(config)#end
ocnos#
 
ocnos#show running-config | include err
errdisable cause stp-bpdu-guard
ocnos#
 
ocnos#con t
Enter configuration commands, one per line. End with CNTL/Z.
ocnos(config)#errdisable timeout interval 50
ocnos(config)#commit
ocnos(config)#end
ocnos#
ocnos#show running-config | include err
errdisable cause stp-bpdu-guard
errdisable timeout interval 50
ocnos#
ocnos#con t
Enter configuration commands, one per line. End with CNTL/Z.
ocnos(config)#
ocnos(config)#no errdisable timeout im
ocnos(config)#no errdisable timeout interval
ocnos(config)#commit
ocnos(config)#end
ocnos#
ocnos#show running-config | include err
errdisable cause stp-bpdu-guard
ocnos#