MAC- Filter for STP BPDUs

Post Reply
woddy

MAC- Filter for STP BPDUs

Post by woddy »

hi,
does someone has a working MAC-filter which blocks all STP-BPDUs especially the CISCO proprietary once. No kind of STP BPDUs should reach a Core Switch via a VPLS Service from a Customer Edge Switch.
thanks
Sargremor

Re: MAC- Filter for STP BPDUs

Post by Sargremor »

This works in production environnment :

configure filter mac-filter 10
----------------------------------------------
default-action forward
entry 1 create
description "BDPU PVST"
match frame-type 802dot3
dst-mac 01:00:0c:cc:cc:cd ff:ff:ff:ff:ff:ff
exit
action drop
exit
entry 2 create
description "BDPU RSTP"
match frame-type 802dot3
dst-mac 01:80:c2:00:00:00 ff:ff:ff:ff:ff:ff
exit
action drop
exit
----------------------------------------------
Post Reply

Return to “7750 SR”