[f-nsp] STP BPDU filtering

[Alexander Shikoff]

On Sat, Dec 14, 2013 at 11:21:28PM +0100, Robert Hass wrote:
>    int ethe 12/8
>     no spanning-tree
It is set by default on MLXe.
And it does not protect from BPDUs receiving and forwarding.
 
>    On Sat, Dec 14, 2013 at 2:12 PM, Alexander Shikoff <[1]minotaur at crete.org.ua> wrote:
> 
>      Hi,
>      Recently I noticed that my Brocade MLXe-16 does not drop STP BPDU packets
>      even if 'spanning-tree protect' is configured in port-configuration:
>      [2]telnet at lsr1-gdr.ki#show int eth 12/8
>      10GigabitEthernet12/8 is up, line protocol is up
>        STP Root Guard is disabled, STP BPDU Guard is enabled
>                                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^
>      But there are a lot STP BPDUs coming in that port, and moreover they
>      are forwarded to all other ports within one VLAN.
>      Generally, I need just to drop all incoming STP BPDUs on all ports,
>      and nothing else. Any hints? Thanks in advance!
>      --
>      MINO-RIPE
>      _______________________________________________
>      foundry-nsp mailing list
>      [3]foundry-nsp at puck.nether.net
>      [4]http://puck.nether.net/mailman/listinfo/foundry-nsp
> 
> Ссылки
> 
>    1. mailto:minotaur at crete.org.ua
>    2. http://telnet@lsr1-gdr.ki/#show
>    3. mailto:foundry-nsp at puck.nether.net
>    4. http://puck.nether.net/mailman/listinfo/foundry-nsp

-- 
MINO-RIPE