HP PROCURVE 3400CL-24G User Manual download pdf (Page 98)

Enhancements

Release M.10.10 Enhancements

Release M.10.10 includes the following enhancement:

Spanning Tree Per-Port BPDU Filtering

The STP BPDU filter feature allows control of spanning-tree participation on a per-port basis. It can

be used to exclude specific ports from becoming part of spanning tree operations. A port with the

BPDU filter enabled will ignore incoming BPDU packets and stay locked in the spanning-tree

forwarding state. All other ports will maintain their role.

Here are some sample scenarios in which this feature may be used:

■ To have STP operations running on selected ports of the switch rather than every port of the

switch at a time.

■ To prevent the spread of errant BPDU frames.

■ To eliminate the need for a topology change when a port's link status changes. For example,

ports that connect to servers and workstations can be configured to remain outside of

standard spanning-tree operations.

■ To protect the network from denial of service attacks with spoofing spanning-tree BPDUs

by dropping incoming BPDU frames.

Note

BPDU protection imposes a more secure mechanism that implements port shut down and a detection

alert when an errant BPDU frame is received ( see page 91 for details). BPDU protection will take

precedence over BPDU filtering if both features have been enabled on the same port.

Configuring STP BPDU Filters

The following commands allow you to configure BPDU filters via the CLI.

For example, to configure BPDU filtering on port a9, enter:

ProCurve(config)# spanning-tree a9 bpdu-filter

Syntax: [no] spanning-tree <port-list | all> bpdu-filter

Enables/disables the BPDU filter feature on the specified port(s).

1 2 ... 93 94 95 96 97 98 99 100 101 102 103 ... 196 197

No comments

HP PROCURVE 3400CL-24G User Manual Page 98