[c-nsp] Disabling PVST+ in mixed vendor network

drrtuy drrtuy at ya.ru
Wed Jun 23 11:21:17 EDT 2010


Hi.

> Thanks for the suggestion. We already do that on all access ports on the
> HP switches that support it. However, on the trunks between HP and Cisco
> we have to run MST or RSTP for link redundancy. I want to keep RSTP or
> MST on those links, but disable PVST+.

You can try both commands "spanning-tree mode mst" and no spanning-tree 
vlan xxx" in global config mode along with certain native 802.1q vlans 
on trunk links to complete the task.

WBR
Roman A. Nozdrin

> 
> Regards,
>  
> Jeroen van Ingen
> ICT Service Centre
> University of Twente, P.O.Box 217, 7500 AE Enschede, The Netherlands
> 
> 
> ________________________________
> 
> From: Tony [mailto:td_miles at yahoo.com] 
> Sent: woensdag 23 juni 2010 16:20
> To: cisco-nsp at puck.nether.net; Ingen Schenau, J. van (ICTS)
> Subject: Re: [c-nsp] Disabling PVST+ in mixed vendor network
> 
> 
> Hi,
> 
> Have you looked at the command "spanning-tree bpdufilter enable" ?
> 
> I use it to filter stuff inbound to some cat3550 switches. The
> documentation says:
> 
> "Enabling BPDU filtering on an interface is the same as disabling
> spanning tree on it"
> 
> 
> 
> regards,
> Tony.
> 
> --- On Wed, 23/6/10, j.vaningenschenau at utwente.nl
> <j.vaningenschenau at utwente.nl> wrote:
> 
> 
> 
> 	From: j.vaningenschenau at utwente.nl
> <j.vaningenschenau at utwente.nl>
> 	Subject: [c-nsp] Disabling PVST+ in mixed vendor network
> 	To: cisco-nsp at puck.nether.net
> 	Received: Wednesday, 23 June, 2010, 11:49 PM
> 	
> 	
> 	Hi,
> 	
> 	Maybe this issue is more of a "campus" nature than NSP
> related... but I
> 	think this list reaches more knowledgeable people :)
> 	
> 	We're running a mixed vendor network: a couple of Cat6k switches
> 	(Sup720-3B) at the core for L3 (internal routing, BGP) and some
> L2
> 	switching on campus-wide VLANs, and a lot (300+) of HP ProCurve
> switches
> 	for all other L2 switching needs.
> 	
> 	We'd like to completely kill proprietary STP stuff from our
> network and
> 	only run STP, RSTP and MST. Do any of you know a way to stop the
> Cat6k
> 	from generating PVST / PVST+ and, more imoprtantly, from acting
> upon
> 	accidentally received frames of that type?
> 	
> 	We already drop PVST+ on all ProCurve switches that support it,
> but once
> 	in a while a frame makes it through. Last time that caused a 10
> GE port
> 	to go into "PVST Inconsistent" state, dropping one of our DC's
> off the
> 	network until we manually toggled the port down/up.
> 	
> 	Due to historical, political and budgetary reasons we have to
> operate
> 	large L2 domains. That's going quite well, but the last large
> 	disruptions we had were all due to "PVST Inconsistent" ports
> while there
> 	was nothing wrong with the logical topology. So I hope to get
> some
> 	insight how to avoid that :)
> 	
> 	
> 	Regards,
> 	
> 	Jeroen van Ingen
> 	ICT Service Centre
> 	University of Twente, P.O.Box 217, 7500 AE Enschede, The
> Netherlands
> 	
> 	_______________________________________________
> 	cisco-nsp mailing list  cisco-nsp at puck.nether.net
> 	https://puck.nether.net/mailman/listinfo/cisco-nsp
> 	archive at http://puck.nether.net/pipermail/cisco-nsp/
> 	
> 
> 
>  
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 



More information about the cisco-nsp mailing list