Wired Intelligent Edge

 View Only
last person joined: 22 hours ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Expand all | Collapse all

BPDU Filtering on Trunk

This thread has been viewed 20 times
  • 1.  BPDU Filtering on Trunk

    Posted Dec 04, 2020 02:27 AM

    Hi

    We have a 8320 Core with 2 Sites (1 & 2). Both Sites have a VSX cluster of 2 8320s and MCLAG between the Sites. We do run a number of distribution and access switches on both sites supporting various inhouse/3rd party systems, some of them using their own L2 switches. Some of these systems run between the sites.

    We want to keep the 8320 Core Spanning Tree free but run STP on both Sites. Distribution switches on each site Connect to their 8320 VSX clusters over Trunk (Dist side)  and MCLAG (8302 side).

    As I understand I can configure BPDU Filtering on the Distribution switches facing the VSX Core to omit these interfaces from the STP. What I cannot find in documentation is how to configurte it on a Trunk.
    - spanning-tree <port-list> bpdu-filter
    or
    - spanning-tree Trk1 bpdu-filter

                                    ----------------------                                       ----------------------
                                    | Aruba 8320   |                                      | Aruba 8320   |
                      MCLAG/| SW1_Site1     |________________________| SW1_Site2      |\MCLAG
                                  / | VSX Pri           |                   |                 | VSX Pri           |  \
         ----------------   /    ----------------------                   |                  ----------------------    \    ---------------
        |  J9850A   | /                   |                               |                              |                   \  |  J9727A  |
        |  D_Site1  |/Trk               | ISL                    MCLAG                  ISL |                Trk\| D_Site2  |
        |                 |\                    |                               |                              |                      /|               |
         ----------------  \                   |                              |                              |                    /   ---------------
                                 \    ----------------------                  |                 ----------------------     /
                                   \  | Aruba 8320   |                 |                 | Aruba 8320   |  /
                        MCLAG\| SW2_Site1     |_______________________| SW2_Site2      |/MCLAG
                                      | VSX Sec          |                                    | VSX Sec          |
                                      ----------------------                                      ----------------------



    ------------------------------
    Timo Krjukoff
    ------------------------------


  • 2.  RE: BPDU Filtering on Trunk

    EMPLOYEE
    Posted Dec 04, 2020 05:41 AM
    Hello
    You specify the trunk number in the CLI command. The individual ports are not valid for the command if they are trunk members.

    HP-2920-48G(config)# sh tr

    Port | Name Type | Group Type
    ------ + -------------------------------- ---------- + ----- --------
    10 | 100/1000T | Trk1 Trunk
    11 | 100/1000T | Trk1 Trunk


    HP-2920-48G(config)# spanning-tree 10 bpdu-filter
    Module not present for port or invalid port: 10
    HP-2920-48G(config)# spanning-tree trk1 bpd?
    bpdu-filter
    bpdu-protection

    ------------------------------
    Emil Gogushev
    ------------------------------



  • 3.  RE: BPDU Filtering on Trunk

    Posted Dec 04, 2020 06:21 AM

    Hi Emil

    Thank you for the Quick Reply.


    Chhers

    /timo



    ------------------------------
    Timo Krjukoff
    ------------------------------