From: Joseph Brunner (joe@affirmedsystems.com)
Date: Thu Aug 28 2008 - 12:29:41 ART
Sending bpdu's to edge user ports is a security risk to some. So some do use
this. If you are sure of your cabling, then it wont make a loop.
I would use It if I wanted to plug into a switch with bpduguard enabled, but
not port fast... hey I may want two machines at my desk?
;)
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Shahid Ansari
Sent: Thursday, August 28, 2008 11:27 AM
To: Ibrahim kabir
Cc: Julio Carrasco; ccielab@groupstudy.com
Subject: Re: BPDU Filter on the interface vs. global
Does any one use BPDUfilter in any live Environment ?Why it is essential to
use ?
Theoretically we know how it works but practically why to enable BPDUfilter
?
Thanks
Shahid
On Thu, Aug 28, 2008 at 2:37 AM, Shahid Ansari <shahid1357@gmail.com> wrote:
> Does any one use BPDUfilter in any live Environment ?Why it is essential
> to use ?
>
> Theoretically we know how it works but practically why to enable
BPDUfilter
> ?
>
>
> Thanks
>
> Shahid
>
> On Thu, Aug 28, 2008 at 3:59 AM, Ibrahim kabir <kebramccie@live.com>wrote:
>
>> The BPDU filtering feature can be globally enabled on the switch or can
be
>> enabled per interface, but
>> the feature operates with some differences.
>>
>> At the global level, you can enable BPDU filtering on Port Fast-enabled
>> interfaces by using the
>> spanning-tree portfast bpdufilter default global configuration command.
>> This
>> command prevents
>> interfaces that are in a Port Fast-operational state from sending or
>> receiving
>> BPDUs. The interfaces still
>> send a few BPDUs at link-up before the switch begins to filter outbound
>> BPDUs.
>> You should globally
>> enable BPDU filtering on a switch so that hosts connected to these
>> interfaces
>> do not receive BPDUs. If
>> a BPDU is received on a Port Fast-enabled interface, the interface loses
>> its
>> Port Fast-operational status,
>> and BPDU filtering is disabled.
>>
>> At the interface level, you can enable BPDU filtering on any interface by
>> using the spanning-tree
>> bpdufilter enable interface configuration command without also enabling
>> the
>> Port Fast feature. This
>> command prevents the interface from sending or receiving BPDUs.
>>
>> Caution Enabling BPDU filtering on an interface is the same as disabling
>> spanning tree on it and can result in
>> spanning-tree loops.
>> You can enable the BPDU filtering feature for the entire switch or for an
>> interface
>> got that directly for the 3560CG
>>
>> HTH
>>
>> kabir
>> _________________________________________________________________
>> Connect to the next generation of MSN Messenger
>>
>>
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=w
l
>> mailtagline
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
>
-- Regards,Shahid
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Mon Sep 01 2008 - 08:15:32 ART