Options

PortFast?

gadav478gadav478 Member Posts: 374 ■■■□□□□□□□
Hey guys-

Just doing some studying here and I came across PortFast. I understand that it reduces the time it takes for a port to go from BLOCKING to FORWARDING modes, but I see everywhere that is should only be used in a switch to workstation/server/host segment and not between two switches... why is this?
Goals for 2015: CCNP

Comments

  • Options
    MAC_AddyMAC_Addy Member Posts: 1,740 ■■■■□□□□□□
    Because this may create a network loop.
    2017 Certification Goals:
    CCNP R/S
  • Options
    ZartanasaurusZartanasaurus Member Posts: 2,008 ■■■■■■■■■□
    Portfast bypasses the normal spanning tree process. That's obviously fine when you're connecting to a server or computer since you aren't going to get a loop there (exceptions apply). You should enable bpduguard on those ports though.

    For obvious reasons, you generally don't want to bypass the spanning tree process between switches since that's where a loop will occur.
    Currently reading:
    IPSec VPN Design 44%
    Mastering VMWare vSphere 5​ 42.8%
  • Options
    IristheangelIristheangel Mod Posts: 4,133 Mod
    In a switched environment, the ports take about 15-30 seconds to come up because STP is listening and learning through BPDU's. During those 15-30 seconds that it takes for the ports to start forwarding, the switches are determining what the root switch will be and disabling ports that could be a potential loop. By enabling portfast, you are skipping he whole listening/learning process and just having the port immediately start forwarding. This is good for ports directly connected to end-user devices but it can be disastrous if you enable it on ports between other network devices. Hopefully that makes sense :)
    BS, MS, and CCIE #50931
    Blog: www.network-node.com
  • Options
    gadav478gadav478 Member Posts: 374 ■■■□□□□□□□
    In a switched environment, the ports take about 15-30 seconds to come up because STP is listening and learning through BPDU's. During those 15-30 seconds that it takes for the ports to start forwarding, the switches are determining what the root switch will be and disabling ports that could be a potential loop. By enabling portfast, you are skipping he whole listening/learning process and just having the port immediately start forwarding. This is good for ports directly connected to end-user devices but it can be disastrous if you enable it on ports between other network devices. Hopefully that makes sense :)

    I see, so by enabling PortFast, you aren't allowing STP to implement its algorithm to decide which ports to prune. Got it.
    Goals for 2015: CCNP
  • Options
    IristheangelIristheangel Mod Posts: 4,133 Mod
    You got it
    BS, MS, and CCIE #50931
    Blog: www.network-node.com
  • Options
    sratakhinsratakhin Member Posts: 818
    Can portfast be used on a network without redundant links? I understand it's not the best practice, but I'm just curious :)
  • Options
    andy4techandy4tech Member Posts: 138
    Yea,portfast is usually used between a server and other devices that is connected into your switch that will not create a switching loop if stp is disabled,you know two switches connected together will always have a redundant link with stp enabled on them,redundant links are created so that if there is any problem with the forwarding port,the redundant link can be put in use.
  • Options
    Forsaken_GAForsaken_GA Member Posts: 4,024
    By enabling portfast, you are skipping he whole listening/learning process and just having the port immediately start forwarding

    Partially correct. The real trick to PortFast is that it suppresses the TCN's that would normally come with a port changing status, so the rest of the network doesn't go into a reconvergence. Since edge ports will never participate in STP, it's inefficient to send TCN's, since the spanning tree topology hasn't actually changed.

    This is also why you don't run portfast on an inter-switch link. When an inter-switch link comes up it is EXTREMELY important TCN's are sent, because the spanning tree forwarding path may very well have changed.

    You certainly can put portfast on an inter-switch link, and it won't kill your network. It will possibly form a temporary loop until the portfast port receives a BPDU. At that point, it will drop the port out of forwarding and into blocking and go through the normal STP process. It's bad form, bad configuration, but it's not going to kill your network.
  • Options
    sratakhinsratakhin Member Posts: 818
    Thank you Forsaken. That's why I meant - using PortFast between switches without redundant links. Not that I'll ever use it though :)
Sign In or Register to comment.