Spanning Tree topology changes

[acutbal]

Hello,
First of all, thank you very much for this plugin, it's very useful. I've only one question... Do you think that is ti possible to add the ability to check the Spanning Tree topology changes?

Thank you very much and best regards.

[Ma7h1]

Hey,
so if the mac address changes you want to have a warning ?
we can implement this.

Cheers,
Mathias

[acutbal]

Hello!! 😄
We manage networks with a lot of Huawei switchs, most of them CloudEngine S5732 (V1 and V2 firmwares revisions). One of the alarm we use to detect problems in the LAN are the STP topology changes, if we see that the topology changes every 60 - 120 seconds then we are in troubles. We run the command display stp topology-change to check them:

So, I think that it could be a very good thing to have a service in Checkmk alerting (and notify via email/Telegram) if there are tree or more STP topology changes in the interval of less 120 seconds.

Here is an example, in this case for Cisco:
https://thl-cmk.hopto.org/checkmk/vendor-independent/stp_topo_change/-/tree/master

I think that this extension only monitors the default vlan 1, it would be great if more vlans could be added as a service.

Best regards!!

[Ma7h1]

Isn't it enough to simply check whether the root MAC address changes?

Or whether the master bridge ID changes?

We could write this parameter during the initial service discovery and then check against it, like the Bandwith in the interface check.

Cheers

[acutbal]

Hello!! 😄
Yes, this could be a good idea, on Huawei switchs we usually use VBST (VLAN-Based Spanning Tree), not sure if this helps...

A parameter that helps us a lot when monitoring the network is ensuring that there are no consecutive changes within a period of less than 120 seconds. Could the service be configured to generate a critical alert if there have been three or more changes in less than 90 seconds and a warning alert for 120 seconds?

Thank you very much for your interest and best regards!! 😄

[Ma7h1]

Hey,
do you have an OID or the informations via SNMP?

and if you have one, could you provide a snmpwalk?

Cheers

[acutbal]

Hi,
Today is a national holiday in Spain, but next week I can find a time to get info on an S5732, and perhaps, an S6700.

Best regards!

[acutbal]

Hello,
I attach the snmpwalk of a CloudEngine 5732, I tweaked some info with X.

snmpwalk Huawei S5732.log

Also, I have found this for the MiB:
https://mibbrowser.online/mibdb_search.php?search=huawei&userdropdown=anymatch

I hope that this helps...

Best regards.

[Ma7h1]

Hello,

I could not find any oid who is giving this information ?
Did you find any ?

Cheers,
Mathias

[acutbal]

Hello @Ma7h1 !! 😄
I've searched, but I've found nothing... So, finally I've asked the Oracle of Delphi about such thing, and this is its answer:

Huawei STP/MSTP OIDs for Root Bridge Change Events

To monitor root bridge changes in Huawei switches (via SNMP), you can use the following trap OIDs from the HUAWEI-MSTP-MIB:

Trap/Event	OID	Description
hwMstpProRootLost	1.3.6.1.4.1.2011.5.25.42.4.2.28	The device is no longer the root bridge
hwMstpProRootResume	1.3.6.1.4.1.2011.5.25.42.4.2.29	The device has become the root bridge
hwMstpProRootShake	1.3.6.1.4.1.2011.5.25.42.4.2.30	Frequent root changes (root flapping) detected
hwMstpProRootShakeResume	1.3.6.1.4.1.2011.5.25.42.4.2.31	Root flapping has stopped

---

Useful OIDs for Polling (optional)

If you want to query the current root bridge via SNMP (not only rely on traps), you can also use:

• hwMstpProInstanceDesignedRoot – 1.3.6.1.4.1.2011.5.25.42.4.1.28.1.3
  Returns the bridge ID of the current root bridge.

• hwMstpProInstanceRootType – 1.3.6.1.4.1.2011.5.25.42.4.1.28.1.6
  Indicates the root type (primary, secondary, etc.).

---

Implementation Notes

• Enable SNMP traps on the Huawei device.
• Configure your NMS or monitoring tool to listen for these trap OIDs.
• Optionally, perform periodic SNMP GET requests to verify the current root bridge.

---

⚡ Summary:
Use the trap OIDs (hwMstpProRootLost, hwMstpProRootResume, hwMstpProRootShake, hwMstpProRootShakeResume) to detect root bridge changes in Huawei STP/MSTP.
Use the query OIDs (hwMstpProInstanceDesignedRoot, hwMstpProInstanceRootType) if you also want to poll the current root bridge status.

Hope this helps!!

Best regards.

[acutbal]

Hello @Ma7h1 !! 😄
Did you see my latest post?

Best regards and thank you very much!!