From: Shahid Ansari (shahid1357@gmail.com)
Date: Thu Aug 28 2008 - 12:39:46 ART
As BPDUfilter disble spanning tree can creat more chances of loop .so
normally we keeps all the ports in spanning tree .
Rather than that we can use to BPDU guard , Root guard to avoide unwanted
root bridge .
Am I right ? : )
thanks
On Thu, Aug 28, 2008 at 6:29 PM, Joseph Brunner <joe@affirmedsystems.com>wrote:
> Sending bpdu's to edge user ports is a security risk to some. So some do
> use
> this. If you are sure of your cabling, then it wont make a loop.
>
> I would use It if I wanted to plug into a switch with bpduguard enabled,
> but
> not port fast... hey I may want two machines at my desk?
>
> ;)
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Shahid Ansari
> Sent: Thursday, August 28, 2008 11:27 AM
> To: Ibrahim kabir
> Cc: Julio Carrasco; ccielab@groupstudy.com
> Subject: Re: BPDU Filter on the interface vs. global
>
> Does any one use BPDUfilter in any live Environment ?Why it is essential
> to
> use ?
>
> Theoretically we know how it works but practically why to enable BPDUfilter
> ?
>
>
> Thanks
>
> Shahid
>
>
>
> On Thu, Aug 28, 2008 at 2:37 AM, Shahid Ansari <shahid1357@gmail.com>
> wrote:
>
> > Does any one use BPDUfilter in any live Environment ?Why it is essential
> > to use ?
> >
> > Theoretically we know how it works but practically why to enable
> BPDUfilter
> > ?
> >
> >
> > Thanks
> >
> > Shahid
> >
> > On Thu, Aug 28, 2008 at 3:59 AM, Ibrahim kabir <kebramccie@live.com
> >wrote:
> >
> >> The BPDU filtering feature can be globally enabled on the switch or can
> be
> >> enabled per interface, but
> >> the feature operates with some differences.
> >>
> >> At the global level, you can enable BPDU filtering on Port Fast-enabled
> >> interfaces by using the
> >> spanning-tree portfast bpdufilter default global configuration command.
> >> This
> >> command prevents
> >> interfaces that are in a Port Fast-operational state from sending or
> >> receiving
> >> BPDUs. The interfaces still
> >> send a few BPDUs at link-up before the switch begins to filter outbound
> >> BPDUs.
> >> You should globally
> >> enable BPDU filtering on a switch so that hosts connected to these
> >> interfaces
> >> do not receive BPDUs. If
> >> a BPDU is received on a Port Fast-enabled interface, the interface loses
> >> its
> >> Port Fast-operational status,
> >> and BPDU filtering is disabled.
> >>
> >> At the interface level, you can enable BPDU filtering on any interface
> by
> >> using the spanning-tree
> >> bpdufilter enable interface configuration command without also enabling
> >> the
> >> Port Fast feature. This
> >> command prevents the interface from sending or receiving BPDUs.
> >>
> >> Caution Enabling BPDU filtering on an interface is the same as disabling
> >> spanning tree on it and can result in
> >> spanning-tree loops.
> >> You can enable the BPDU filtering feature for the entire switch or for
> an
> >> interface
> >> got that directly for the 3560CG
> >>
> >> HTH
> >>
> >> kabir
> >> _________________________________________________________________
> >> Connect to the next generation of MSN Messenger
> >>
> >>
>
> http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=w
> l
> >> mailtagline
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >
>
>
> --
> Regards,
>
> Shahid
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>
-- Regards,Shahid
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Mon Sep 01 2008 - 08:15:32 ART