From: Anderson Alves (mota_anderson@hotmail.com)
Date: Mon May 05 2008 - 12:24:14 ART
Hi,
Just would like to add that you can globally enable BPDU filtering on all
Port Fast enabled with command (spanning-tree portfast bpdufilter default).
Also be aware that enabling spanning bpdufilter is the same as for disabling
spanning-tree on a vlan or interface (since it won't receive or send any
BPDU it will silently drop the packets)
Look what cisco has to say about this:
Use care when entering the spanning-tree bpdufilter enable command. Enabling
BPDU filtering on an interface is approximately equivalent to disabling the
spanning tree for this interface. It is possible to create bridging loops if
this command is not correctly used.
Cheers,
Anderson Mota Alves
CCIE3 #16778 (R/S, SP and Security)
Technical Instructor
http://www.netmetric-solutions.com
http://www.andersonalves.net
This archive was generated by hypermail 2.1.4 : Mon Jun 02 2008 - 06:59:15 ART