3-29
Multiple Instance Spanning-Tree Operation
Configuring MSTP
For example, to configure BPDU filtering on port a9, enter:
HP Switch(config)# spanning-tree a9 bpdu-filter
Viewing BPDU Filtering. The spanning-tree show <port> configuration
command displays the BPDU’s filter state.
Figure 3-5. Example of BPDU Filter in Show Spanning Tree Configuration Command
BPDU filters per port are displayed as separate entries of the spanning tree
category within the configuration file.
Figure 3-6. Example of BPDU Filters in the Show Configuration Command
Configuring BPDU Protection
BPDU protection is a security feature designed to protect the active STP
topology by preventing spoofed BPDU packets from entering the STP domain.
In a typical implementation, BPDU protection would be applied to edge ports
connected to end user devices that do not run STP. If STP BPDU packets are
received on a protected port, the feature will disable that port and alert the
network manager via an SNMP trap as shown in Figure 3-7.
HP Switch(config)# show spanning-tree a9 config
...
| Path Prio Admin Auto Admin Hello Root TCN BPDU
Port Type | Cost rity Edge Edge PtP Time Guard Guard Flt
----- --------- + --------- ----- ----- ----- ----- ------ ------ ------ ----
A9 100/1000T | Auto 128 No Yes True Global No No Yes
Column showing BPDU filter status
HP Switch(config)# show configuration
. . .
spanning-tree
spanning-tree A9 bpdu-filter
spanning-tree C7 bpdu-filter
spanning-tree Trk2 priority 4
. . .
Rows showing ports with BPDU filters enabled
To Next Page
Loading...
Need help?
General