Re: BPDU filter and bpdu guard on the same interface

Hi Tony, I think you mean spanningtree gurad root interface level config
command which will disable the prot on which it configured if sees a
superior BPDU. My question is about bpdugurad and bpdufilter commands.
KR

On 3 December 2012 15:56, Tony Singh <mothafungla_at_gmail.com> wrote:

> Filter would drop the bpdu frames, guard is where you do not want any
> bpdu's i.e rogue switch and enforcement of your root bridge.
>
> I would think having both on, then it would go into inconsistent state,
> but I'm not near a switch what happened when you tried?
>
> --
> BR
>
> Tony
>
> Sent from my iPhone on 3
>
> On 3 Dec 2012, at 15:34, Tauseef Khan <tasneemjan_at_googlemail.com> wrote:
>
> > I know Anthony Sequeira has expalined it beautifully on the blog but
> > appreciate if someone could clarify.
> > If I have spanntree portfast bpdugurad enabled globally which in-effect
> > will apply to all access ports and will err-disable any accessports if it
> > sees an ingress BPDU. Now I enable "spanntree bpdufilter enable"
> interface
> > config commands on one of the access port interfaces with "spanning-tree
> > portfast default" globally configured, which action will take
> precedence.
> > ie port will be err-disable or will lose its host status on receipt of
> > BPDUs. Also what is the best practice in this scenario. disbale the
> > bpdugurad (spanningtree bpduguard disable) on the interface level before
> > enabling bpdufilter (spanntree bpdufilter enable) or both actions can
> > coexist.....
> > Thanks in advance
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Mon Dec 03 2012 - 16:24:03 ART