Wired Intelligent Edge (Campus Switching and Routing)

 View Only
last person joined: one year ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of HPE Aruba Networking switching devices, and find ways to improve security across your network.
Back to Library

What is BPDU filter and how to enable it in MAS? 

Jul 10, 2014 06:04 PM

Environment  :  This is available in Mobility access switches running 7.3.1.0 and above code versions

 

  BPDU filter if enabled on a port can filter in-bound and out-bound BPDUs thus effectively disabling spanning tree on that port. BPDU filter should be carefully used. ** If BPDU filter is enabled on switch ports connected directly to another switches may lead to switching loops in the network.**
 
Unconditional BPDU Filter
Unconditionally filter in-bound and out-bound BPDUs. If unconditional BPDU filter is enabled BPDUs are not sent through the port and BPDUs are received but dropped. Unconditional BPDU filter do not depend on portfast enabled/disabled on the port.
 
Conditional BPDU Filter
When portfast is enabled minimum number of BPDUs are sent to determine if the port is genuinely an edge port then stop sending BPDUs. If BPDUs are received remove portfast state and treat as non-edge port. BPDU filter is also disabled on receipt of BPDUs along with portfast. This filter will be effective only when portfast is enabled. 

Note Currently we support portfast, bpduguard and loopguard features. 

Portfast, if enabled on edge ports which are connected to end devices like PC, Printers or Servers will move the port to Forwarding state without having to move through Listening and Learning States but do not filter in-bound and out-bound BPDUs. Also portfast enabled ports do not send Topology Changes to the network. 
 
Configuration
 
(Aruba) (config) #interface-profile mstp-profile MSTP
(Aruba) (Interface MSTP "MSTP") #?
bpdufilter              Enable BPDU filter
 
(Aruba) (Interface MSTP "MSTP") #bpdufilter ?
default                 Enable BPDU filter default
unconditional           Enable BPDU filter unconditional
 
(Aruba) (config) #interface-profile pvst-profile PVST
(Aruba) (Interface MSTP "MSTP") #?
bpdufilter              Enable BPDU filter
 
(Aruba) (Interface MSTP "MSTP") #bpdufilter ?
default                 Enable BPDU filter default
unconditional           Enable BPDU filter unconditional

Commands to verify
(Aruba)#show interface-profile mstp-profile MSTP_CON
Interface MSTP "MSTP_CON"
-------------------------
Parameter                     Value
---------                     -----
Instance port cost            N/A
Instance port priority        N/A
point-to-point                Disabled
portfast                      Enabled
portfast on trunk             Enabled
rootguard                     Disabled
loopguard                     Disabled
bpduguard                     Disabled
bpduguard auto recovery time  N/A
bpdufilter unconditional      Disabled
bpdufilter default            Enabled

Conditional bpdufilter enabled with STP mode MSTP
(Aruba)#show spanning-tree mstp interface gigabitethernet 0/0/0 detail
(GE0/0/0) of MST 0 is designated forwarding
Port path cost 16000, Port priority 128, Port identifier 128.1443
Designated Root ID priority: 32768,  Address: 000b.866a.24c0
Designated Bridge ID priority: 32768,  Address: 000b.866a.3900
Number of transitions to forwarding state: 1
Link type is point-to-point by default, Internal
BPDU sent: 183, Received: 0
Port Fast: operEdge
Root guard: Disabled
Loop guard: Disabled
Bpdu guard: Disabled
Bpdu guard auto recovery time: 0
Bpdufilter unconditional: Disabled
Bpdufilter default: Enabled
 
(Aruba) (config) #show spanning-tree
MST 0
Root ID            Address: 000b.868f.ee37,  Priority: 32768
Regional Root ID   Address: 000b.868f.ee37,  Priority: 32768
Bridge ID          Address: 000b.868f.ee37,  Priority: 32768
External root path cost 0, Internal root path cost 0
Last TC received on intf GE0/0/2, on 2014-03-20 08:03:16 (PST)
Interface  Role  State  Port Id  Cost   Type
---------  ----  -----  -------  ----   ----
GE0/0/0    Desg  FWD    128.1    20000  P2p Edge
GE0/0/2    Desg  FWD    128.3    20000  P2p
 
Unconditional bpdufilter enabled with STP mode PVST
(Aruba) #show spanning-tree vlan 1 d
VLAN 1 Bridge ID priority: 32768, Address: 001a.1e08.6d80
root path cost 16000
Current Root ID priority: 32768, Address: 000b.868f.ee37
Topology change flag not set, Number of topology changes: 2
(GE0/0/0) of VLAN1 is root forwarding
Port path cost 16000, Port priority 128, Port identifier 128.1441
Designated Root ID  priority: 32768, Address: 000b.868f.ee37
Designated Bridge ID priority: 32768,  Address: 000b.868f.ee37
Designated Port ID: 128.1441
Number of transitions to forwarding state: 1
Link type is point-to-point by default
BPDU sent: 0, Received: 0
Port Fast: Disabled
Root guard: Disabled
Loop guard: Disabled
Bpdu guard: Disabled
Bpdu guard auto recovery time: 0
Bpdufilter unconditional: Enabled
Bpdufilter default: Disabled
      

 

Statistics
0 Favorited
2 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.