From: Rob Laidlaw (laidlaw@consecro.com)
Date: Tue Sep 16 2003 - 12:22:14 GMT-3
But the bpduguard will shut down the interface when it recieves a bpdu.
"Receiving a BPDU on a Port Fast-enabled port signals an invalid
configuration, such as the connection of an unauthorized device, and the
BPDU guard feature puts the port in the error-disabled state."
I agree it accomplishes the same thing, but with the bpdu filter configured
just on the interface, if a bpdu is recieved, then nothing happens, it just
ignores the frame. If bpdu-filter was enable in global mode, then that port
just loose port-fast and the filter and starts spanning tree but is still
operational. With bpdu-guard, in either global or interface mode, the
interface gets disabled. Just depends on which you'd rather have.
-Rob
----- Original Message -----
From: "Ozgur Guler (Garanti Teknoloji)" <OzgurG@garanti.com.tr>
To: <Ken.Farrington@barclayscapital.com>
Cc: <ccielab@groupstudy.com>
Sent: Tuesday, September 16, 2003 10:12 AM
Subject: RE: Disable STP per port.
> you can also use bpduguard feature.
>
> from doc cd:
> "Use the BPDU guard feature in a service-provider network to prevent an
access port from participating in the spanning tree. "
> "Enabling BPDU filtering on an interface is the same as disabling spanning
tree on it and can result in spanning-tree loops."
>
> Ozgur
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Ken.Farrington@barclayscapital.com
> Sent: Monday, September 15, 2003 9:43 PM
> To: ccielab@groupstudy.com
> Subject: RE: Disable STP per port.
>
>
> many thx indeed. beers in the post :)
>
> -----Original Message-----
> From: Rob Laidlaw [mailto:laidlaw@consecro.com]
> Sent: 15 September 2003 19:27
> To: Ken.Farrington@barclayscapital.com; ccielab@groupstudy.com
> Subject: Re: Disable STP per port.
>
>
> The reasoning that I have found behind this is that if you had enabled
bpdu
> filtering in global mode and then hook that switch up to another switch,
the
> port that connects the switches should be running spanning tree and thus
the
> switch will remove the filter and port fast automatically for that port
> rather then require the admin to change the configuration. The
> documentation isn't as clear, but when this occurs, it only changes that
> port, the rest of the switch stays on port-fast with the bpdu filter.
>
> Rob
> ----- Original Message -----
> From: <Ken.Farrington@barclayscapital.com>
> To: <ccielab@groupstudy.com>
> Sent: Monday, September 15, 2003 1:17 PM
> Subject: RE: Disable STP per port.
>
>
> > One thing?
> >
> > "If a
> is received on a Port Fast-enabled port, the port loses its
> Port
> > Fast-operational status, and BPDU filtering is disabled."
> >
> >
> > Does this mean that if the port does receive a BPDU, it disables the
BPDU
> > filter?
> >
> > Kinda defaeats the object? I will test in the lab tomorrow, but if you
> have
> > tested this, would much appriciate the feedback?
> >
> >
> > -----Original Message-----
> > From: Rob Laidlaw [mailto:laidlaw@consecro.com]
> > Sent: 15 September 2003 18:40
> > To: Daniel Sheedy; ccielab@groupstudy.com
> > Subject: Re: Disable STP per port.
> >
> >
> >
>
http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration
> > _
> > guide_chapter09186a00800c6ed9.html#xtocid4
> >
> > on the interface enter "spanning-tree bpdufilter enable" This is the
same
> > as
> > disabling spanning tree on the port
> >
> > Rob
> >
> > ----- Original Message -----
> > From: "Alec" <clapun@graduate.hku.hk>
> > To: "Daniel Sheedy" <dansheedy@gmx.net>; <ccielab@groupstudy.com>
> > Sent: Monday, September 15, 2003 12:16 PM
> > Subject: Re: Disable STP per port.
> >
> >
> > > how about to try bpdu filter on that port ?
> > > ----- Original Message -----
> > > From: "Daniel Sheedy" <dansheedy@gmx.net>
> > > To: <ccielab@groupstudy.com>
> > > Sent: Tuesday, September 16, 2003 12:53 AM
> > > Subject: Re: Disable STP per port.
> > >
> > >
> > > > Hi Ken,
> > > >
> > > > I am fairly sure that you can only shut down STP per vlan. Are you
> > trying
> > > > to achieve something with turning off STP on one port?
> > > >
> > > > Daniel Sheedy
> > > >
> > > >
> > > > ----- Original Message -----
> > > > From: <Ken.Farrington@barclayscapital.com>
> > > > To: <ccielab@groupstudy.com>
> > > > Sent: Monday, September 15, 2003 6:09 PM
> > > > Subject: Disable STP per port.
> > > >
> > > >
> > > > > Can anyone tell me if it is possible on a cat3550 to disable STP
on
> a
> > > per
> > > > > port basis. I think you can only do this on a per VLAN basis.
> > > > >
> > > > > STP portfast does not disable STP.
> > > > >
> > > > > Many thx.
> > > > > Ken
> > > > > ________________________________________________________________
> > > > > Ken Farrington
> > > > > Global Networks, Barclays Capital, 5 The North Colonnade, Canary
> > > > > Wharf, London, E14 4BB
> > > > > * Tel : 020 7773 3550
> > > > > * Mob : 07768-866655
> > > > > * ken.farrington@barcap.com
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > ------------------------------------------------------------------------
> > > > > For more information about Barclays Capital, please
> > > > > visit our web site at http://www.barcap.com.
> > > > >
> > > > >
> > > > > Internet communications are not secure and therefore the Barclays
> > > > > Group does not accept legal responsibility for the contents of
this
> > > > > message. Although the Barclays Group operates anti-virus
> programmes,
> > > > > it does not accept responsibility for any damage whatsoever that
is
> > > > > caused by viruses being passed. Any views or opinions presented
are
> > > > > solely those of the author and do not necessarily represent those
of
> > the
> > > > > Barclays Group. Replies to this email may be monitored by the
> > Barclays
> > > > > Group for operational or business reasons.
> > > > >
> > > > >
> > ------------------------------------------------------------------------
> > > > >
> > > > > ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> > > > >
> > _______________________________________________________________________
> > > > > Please help support GroupStudy by purchasing your study materials
> > from:
> > > > > shop.groupstudy.com
> > > > >
> > > > > Subscription information may be found at:
> > > > > http://www.groupstudy.com/list/CCIELab.html
> > > >
> > > > ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> > > >
> _______________________________________________________________________
> > > > Please help support GroupStudy by purchasing your study materials
> from:
> > > > shop.groupstudy.com
> > > >
> > > > Subscription information may be found at:
> > > > http://www.groupstudy.com/list/CCIELab.html
> > >
> > > ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> > >
This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:28 GMT-3