Wired Intelligent Edge

last person joined: yesterday 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

How configration BPDU Guard on aruba 2930F SW??

This thread has been viewed 18 times

  • 1.  How configration BPDU Guard on aruba 2930F SW??

    Posted May 25, 2018 01:51 AM
    Hello

    I set it on the Aruba 2930F.

    I would like to set up the BPDU Guard.

    Perhaps

    If you have a setup guide, please let me know.

    Thank you for your support.


  • 2.  RE: How configration BPDU Guard on aruba 2930F SW??

    EMPLOYEE
    Posted May 25, 2018 08:49 AM

    Command:

    spanning-tree <port-list> bpdu-protection

     

    Please check the "ArubaOS-Switch Advanced Traffic Management Guide"



  • 3.  RE: How configration BPDU Guard on aruba 2930F SW??

    EMPLOYEE
    Posted May 25, 2018 01:11 PM

    Greetings!

     

    There is also the root guard feature, which functions similar to BPDU protection, but only triggers if the port receives a superior BPDU.  To enable this feature:

     

    switch(config)# spanning-tree <interface> root-guard


  • 4.  RE: How configration BPDU Guard on aruba 2930F SW??

    Posted May 26, 2018 08:12 AM

    안녕하세요.

     

    ArubaOS가 현재 기존 Procurve의 Provision 명령어와 거의 같으므로

    아래 명령어로 적용 하시면 될것 같습니다.

     

    예를들어 17번 포트에 BPDU Guard를 적용할 경우

     

    (config)# spanning-tree bpdu-protection-timeout 300
    (config)# spanning-tree 17 bpdu-protection

     

    그리고 아래 BPDU 필터를 사용하면, BPDU를 필터하게 되어 연속적으로 계속 포워딩 모드로 사용할 수

    있게 하는 명령어 입니다.. Loop발생시 에는 아래 명령어를 삭제 해야됩니다.

    (config)# spanning-tree 17 bpdu-filter

     

    예) 삭제시 

    "no spanning tree PORT_LIST bpdu-filter"
    "no spanning tree PORT_LIST pvst-filter"



  • 5.  RE: How configration BPDU Guard on aruba 2930F SW??

    EMPLOYEE
    Posted May 30, 2018 09:33 PM

    Hi Younglak,

     

    BPDU guard prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port.

     

    In Aruba OS switches this concept is implemented using the bpdu-protection command. BPDU protection disables the specific port or ports if the port(s) receives STP BPDUs.

     

    Command:

    ArubaOS(config)# spanning-tree <port-number(s)> bpdu-protection.

     

    If you just want to supress the BPDUs on that port instead of disabling the port use the BPDU filter command instead:

    ArubaOS(config)# spanning-tree <port-number(s)> bpdu-filter

     

    BPDU filter: Stop a specific port or ports from transmitting BPDUs,
    receiving BPDUs, and assume a continuous fowarding
    state.