Re: Difference between bpduguard & bpdufilter

From: Bob Sinclair (bob@bobsinclair.net)
Date: Thu Oct 13 2005 - 23:09:58 GMT-3


Matthew,

Here are some of my notes:

BPDU Guard:

error-disables port if a portfast port receives a bpdu

enable on all portfast ports: spanning-tree portfast bpduguard default

enable per port: spanning-tree bpduguard [enable disable]

BPDU Filtering:

When enabled globally prevents portfast ports from sending bpdus. If bpdu is
received, port becomes non-portfast and filtering is disabled

spanning-tree portfast bpdufilter default

On interface: DISABLES STP on the port: very dangerous!

spanning-tree bpdufilter enable

Global is recommended, per interface is dangerous.

HTH,

Bob Sinclair
CCIE #10427, CCSI 30427, CISSP
www.netmasterclass.net

  ----- Original Message -----
  From: Matthew Seppeler
  To: ccielab@groupstudy.com
  Sent: Thursday, October 13, 2005 8:09 PM
  Subject: Difference between bpduguard & bpdufilter

  Can someone explain the differences between bpduguard & bpdufilter and
  under which circumstances they would it best be used. The Doc CD does
  not make a clear distinction between the two.

  Matt Seppeler

  _______________________________________________________________________
  Subscription information may be found at:
  http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:50 GMT-3