[j-nsp] EX switches and bpdu-block-on-edge

Pierre-Yves Maunier j-nsp at maunier.org
Mon Jan 14 06:54:02 EST 2013


Hi David,

Thanks for your input.



2013/1/14 <david.roy at orange.com>

> Should be work but I experienced one time a bug with interface all not for
> mstp but for ISIS on MX platform : ldp-sync on interface all, didn't work
> as expected. But if it works in lab for your feature, I think it will be
> good. Beware, when you need upgrade, check before in lab if there is no
> regression :)
>
> David
>
>
>
>
> David Roy
> IP/MPLS Support engineer - Orange France
> Ph. +33 2 99 87 64 72 - Mob. +33 6 85 52 22 13
> david.roy at orange.com
>
> JNCIE-M&T/SP #703 - JNCIE-ENT #305 - JNCIP-SEC
>
> -----Message d'origine-----
> De : juniper-nsp-bounces at puck.nether.net [mailto:
> juniper-nsp-bounces at puck.nether.net] De la part de Pierre-Yves Maunier
> Envoyé : lundi 14 janvier 2013 12:04
> À : Juniper-Nsp List
> Objet : [j-nsp] EX switches and bpdu-block-on-edge
>
> Hi,
>
> I have a quick question about the bpdu-block-on-edge feature on EX
> switches.
>
> I think I have the good configuration for what I want to achieve but I'd
> like some feedback before I put that info production.
>
> I have top of rack EX switches : all ports except the uplink one should
> not receive bpdus and should be blocked if they received some.
>
> I've made the following sample configuration, which given my lab tests,
> works great :
>
> ge-0/0/24 is the uplink
>
> My question is : I have a more-specific config on ge-0/0/24 that over-ride
> the edge statement in "interface all". But as it's not a interface all
> "mode" edge but directly interface all edge, I'd like to be sure the 'edge'
> statement will never be applied to ge-0/0/24 resulting in a really bad
> behaviour in a production environment (shutdown the switch uplink).
>
> protocols {
>     mstp {
>         bridge-priority 60k;
>         interface ge-0/0/24.0 {
>             mode point-to-point;
>         }
>         interface all {
>             edge;
>         }
>         bpdu-block-on-edge;
>     }
> }
> ethernet-switching-options {
>     bpdu-block {
>         disable-timeout 300;
>     }
> }
>
> Regards,
>
> Pierre-Yves Maunier
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
> _________________________________________________________________________________________________________________________
>
> Ce message et ses pieces jointes peuvent contenir des informations
> confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez
> recu ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages
> electroniques etant susceptibles d'alteration,
> France Telecom - Orange decline toute responsabilite si ce message a ete
> altere, deforme ou falsifie. Merci.
>
> This message and its attachments may contain confidential or privileged
> information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and
> delete this message and its attachments.
> As emails may be altered, France Telecom - Orange is not liable for
> messages that have been modified, changed or falsified.
> Thank you.
>
>


More information about the juniper-nsp mailing list