Detecting loop on wds...

We have 3 sector antenas in wds bridge dynamic.
On that 3 sectors we have 3-4 wds clients (ubnt nanostation 5) per each sector.
Behind nanostations we have 20-30 clients over switch.

Few days ago we detected stranged traffic over wds link and CPU on RB435 went 100%. Before was 30-40%.

We suspect it is some kind of loop but we cannot detect where it is. Maybe some user put switch in apartment and made loop.

Any suggestions ? This is frustrating.

This hapened to me . It’s a virus behind a user PC .

how did you solve this ? how did you detect user ?

In torch nothing strange is happening…

It’s dificult to catch this trafic , in your way of managing.
Try to scan every user’s ip in details (if you have static ip’s) one by one and to search for that traffic .
If not you need to put a managed switch between clients not just a simple switch or mikrotik router to catch this .
Did you reset the switches?
Did this happens at night when the users not usualy on ?

I did not reset switches. I have more than 30 switches.

I’m looking for solution to locate loop by bridge filter or nanostation/mikrotik STP protocol.

Anyone ?

Did ou locate in witch sector is the problem?,
Do you see unusual bandwidth load?
Look at your arp Table, to see if there any duplicated Mac.

Could be a broadcast storm, I’ve had it when I connected 2 Sonos devices. Seems like I had not set rsp on the switches and that killed all of my network.

Whats the difference between stp and rstp, i know one is faster that the other, but this impact on cpu? or performance witch is better?

regards

stp = Spanning Tree Protocol
rstp = -Rapid- Spanning Tree Protocol
Wikipedia and the RouterOS Wiki/Manual are your friends!