Re: Differences between BPDUGUARD and BPDUFILTER

From: Bit Gossip (bit.gossip@chello.nl)
Date: Sat Aug 18 2007 - 10:45:54 ART


Another difference is that a port with 'spanning-tree bpduguard enable' is
still sending 802.1d bpdu;
this capture is tcpdump from a linux box attached to that port

7:02:22.373221 802.1d config 802b.00:11:93:bb:a2:00.802f root
802b.00:11:93:bb:a2:00 pathcost 0 age 0 max 20 hello 2 fdelay 15
17:02:24.376942 802.1d config 802b.00:11:93:bb:a2:00.802f root
802b.00:11:93:bb:a2:00 pathcost 0 age 0 max 20 hello 2 fdelay 15
17:02:26.382866 802.1d config 802b.00:11:93:bb:a2:00.802f root
802b.00:11:93:bb:a2:00 pathcost 0 age 0 max 20 hello 2 fdelay 15

Instead with bpdufilter enabled in either local or global mode, no bpdu go
out of the port

----- Original Message -----
From: "abderrahim sadki" <a_sadki1@hotmail.com>
To: "Julio Carrasco" <julio.carrasco@ya.com>; <ccielab@groupstudy.com>
Sent: Friday, August 17, 2007 9:39 PM
Subject: RE: Differences between BPDUGUARD and BPDUFILTER

> Julio,
>
>
> the difference is that with BPDUguard if a bpdu is received on a port
> woth
> portfast enabled, it will shut down that port and put it as err-disable.
> if BPDUfilter is enabled globbaly, and a port with portfast enabled
> receives a
> BPDU it will disable portfast and treat that port like a normal STP
> port.(discarding->learning->forwarding)
>
> if BPDUfilter is enabled locally ie in interface mode it will ignore BPDUs
> received on that port.
>
> Please correct me if i am wrong.
>
> Abdel
>
>> From: julio.carrasco@ya.com> To: ccielab@groupstudy.com> Subject:
> Differences between BPDUGUARD and BPDUFILTER> Date: Fri, 17 Aug 2007
> 19:13:50
> +0200> > Hi all,> > i have a little trouble with those two commands, as I
> understand this> bpdufilter doesn4t allow the port to send spanning-tree
> bpdu4s and also> doesn4t allow the port to accept any bpdu.> And
> bpduguard,
> doesn4t allow bpdu4s and puts the port into errdisable state if> receives
> one.> > So the only add that bpduguard does to bpdu-filter, is the
> capability
> of> putting the port in err-disable ??> > Thanks,> Julio.> >
> _______________________________________________________________________>
> Subscription information may be found at: >
> http://www.groupstudy.com/list/CCIELab.html
> _________________________________________________________________
> Explore the seven wonders of the world
> http://search.msn.com/results.aspx?q=7+wonders+world&mkt=en-US&form=QBRE
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sat Sep 01 2007 - 11:32:11 ART