RE: BPDU Filter on the interface vs. global

From: Anthony Sequeira (Anthony_Sequeira@skillsoft.com)
Date: Thu Aug 28 2008 - 15:18:10 ART


I have heard that some use it this way...

They turn on PortFast for ALL the ports on the switch. Then they also
turn on BPDU Filter for ALL the ports on the switch. Now, if they do
plug in another switch for trunking on a port, that port will
automatically lose its PortFast status.

Personally, I think this is a bit crazy of a way to go, and the other
reasons shared on this thread make more sense.

However you might use this feature - be sure to review the distinctions
on Global mode versus Interface mode and the implications. This is a
dangerous command as others have pointed out.

Anthony J Sequeira
#15626

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Shahid Ansari
Sent: Thursday, August 28, 2008 11:27 AM
To: Ibrahim kabir
Cc: Julio Carrasco; ccielab@groupstudy.com
Subject: Re: BPDU Filter on the interface vs. global

Does any one use BPDUfilter in any live Environment ?Why it is essential
to
use ?

Theoretically we know how it works but practically why to enable
BPDUfilter
?

Thanks

Shahid

On Thu, Aug 28, 2008 at 2:37 AM, Shahid Ansari <shahid1357@gmail.com>
wrote:

> Does any one use BPDUfilter in any live Environment ?Why it is
essential
> to use ?
>
> Theoretically we know how it works but practically why to enable
BPDUfilter
> ?
>
>
> Thanks
>
> Shahid
>
> On Thu, Aug 28, 2008 at 3:59 AM, Ibrahim kabir
<kebramccie@live.com>wrote:
>
>> The BPDU filtering feature can be globally enabled on the switch or
can be
>> enabled per interface, but
>> the feature operates with some differences.
>>
>> At the global level, you can enable BPDU filtering on Port
Fast-enabled
>> interfaces by using the
>> spanning-tree portfast bpdufilter default global configuration
command.
>> This
>> command prevents
>> interfaces that are in a Port Fast-operational state from sending or
>> receiving
>> BPDUs. The interfaces still
>> send a few BPDUs at link-up before the switch begins to filter
outbound
>> BPDUs.
>> You should globally
>> enable BPDU filtering on a switch so that hosts connected to these
>> interfaces
>> do not receive BPDUs. If
>> a BPDU is received on a Port Fast-enabled interface, the interface
loses
>> its
>> Port Fast-operational status,
>> and BPDU filtering is disabled.
>>
>> At the interface level, you can enable BPDU filtering on any
interface by
>> using the spanning-tree
>> bpdufilter enable interface configuration command without also
enabling
>> the
>> Port Fast feature. This
>> command prevents the interface from sending or receiving BPDUs.
>>
>> Caution Enabling BPDU filtering on an interface is the same as
disabling
>> spanning tree on it and can result in
>> spanning-tree loops.
>> You can enable the BPDU filtering feature for the entire switch or
for an
>> interface
>> got that directly for the 3560CG
>>
>> HTH
>>
>> kabir
>> _________________________________________________________________
>> Connect to the next generation of MSN Messenger
>>
>>
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&sour
ce=wl
>> mailtagline
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>>



This archive was generated by hypermail 2.1.4 : Mon Sep 01 2008 - 08:15:33 ART