SPT and 1GB NIC Card issues

[sneekn]

We have recently introduced several new computers to our domain that have 1GB Internal NIC's, The users are getting XP cannot find profile errors...

We have narrowed the issue down to SPT and the NIC but we cannot find any workarounds.

Does anyone have any idea other than turning the switches to Fast Port Forwarding (I think thats what it is called)

We are running
-2003 AD/DNS
-2k with WINS/DHCP
-All XP Pro desktops/only the 1GB are having this issue.
Any help would be great
Thank you in advance...

 

[baddos]

Under the interface that the PC is connected to, the command will be "switchport portfast".

 

[lui3]

you can also use the command

switchport mode access

this will disable trunking, channelling and spanning tree on the ports enabling less 5 second port forwarding.

 

[BuckWeet]

switchport mode access does not disable spanning tree on the interface. It just makes the port a normal switchport unconditionally. Other than disabling spanning tree totally (not recommended) you should use the spanning-tree portfast command that 'baddos' said to use..


BuckWeet

 

[lui3]

My Bad BuckWeet is correct.

i meant to say use

switchport host

this will disable channeling, trunking, and spanning tree on host ports.

this is an important security setting. disabling trunking on host ports is important just like disabling cdp. clients, unless they are ip phones/aps, should not need to trunk vlans. this can be a security risk if someone were to connect to a trunk capable port and try to access management vlans, phones vlans, etc. acls can prevent some of this but it is just another sec precaution.

channeling is not necessary on access ports either. PAgP just takes up more forwarding time as it tries to comeup.

the old CatOS had a similar command

set port host

 

[Belushi]

In addition, if using port fast you may want to employ bpdu guard. This will protect spanning-tree portfast ports from forming loops. If the switchport recognizes a bpdu it will autmoatically go into the errdisable state. Just another security precaution. the command is:

spanning-tree bpduguard enable