[j-nsp] Blocking BPDU´s in access interfaces (MX960)
Matías Di Blasi
matias.diblasi at iquall.net
Thu Jul 30 21:43:25 EDT 2009
Hi!
I need to block BPDUs on an access interfaces in a MX960, this
interfaces don´t participates in spanning-tree (MSTP).
I need this because if a BPDU is received on an access interface
(untagged), it is forwarded through a bridged domain that have some
interfaces in trunk mode, and when Cisco Routers (76xx) receive a tagged
BPDU, they switch to per-vlan STP, so i need avoid this behavior.
Can i do this by configuring BPDU-block on access interface?
The manual say "To configure the interfaces on which the system should
not expect to receive BPDUs,
include the interfaces interface-name statement at the [edit protocols
layer2-control
bpdu-block] hierarchy level. You can apply this statement to aggregated
Ethernet
interfaces. By default, the system accepts all BPDUs received on any
interface unless
you include this statement. If you configure this statement on a blocked
interface,
and a BPDU is received on the interface, the system will disable the
interface and
stop forwarding frames out the interface until the bridging process is
restarted. You
can alter this behavior with the disable-timeout statement."
In which case you should configure BPDU-block on an interface that could
be blocked by MSTP? If an interface is blocked by MSTP, so it is
receiving BPDUs, so always will be disabled if BPDU-block is configured,
is this correct?
When an access interface with BPDU-block (not participating in MSTP)
receives a BPDU, it is disabled? or the router just ignores the BPDU?
Thanks in advance,
Matías Di Blasi
More information about the juniper-nsp
mailing list