[c-nsp] Supress STP on a port?

Mark Tinka mtinka at globaltransit.net
Fri Mar 13 23:56:20 EDT 2009


On Thursday 12 March 2009 02:57:02 pm Michael K. Smith - 
Adhost wrote:

> I echo what Lincoln said as loudly as I can without
> typing in all caps.  If you enable filtering and you get
> a second path somehow or somewhere (customers can be very
> helpful by doing "stuff" when you're not looking), you
> will loop up your entire network.  This will happen at 3
> am 2 years from now on a Sunday when you're out of town
> and your front line tech is asleep in a hut somewhere. 
> Trust me.  BPDU-filter bad.  Really.

As one poster subtly mentioned, limit BPDU filtering to Edge 
ports (Portfast-enabled ports in Cisco speak).

Trunk ports would still process BPDU's, as they are 
typically not configured as Edge ports.

Cheers,

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: This is a digitally signed message part.
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20090314/7a611792/attachment.bin>


More information about the cisco-nsp mailing list