Configuring Bpdu Protection On All Edge Ports - Juniper ACX1000 Configuration Manual

Related
Documentation

Configuring BPDU Protection on All Edge Ports

Copyright © 2017, Juniper Networks, Inc.
ae-X { # VLAN encapsulation
encapsulation (ethernet-vpls vlan-vpls); # on aggregated Ethernet.
...
}
ae-X { # Extended VLAN encapsulation
vlan-tagging; # on aggregated Ethernet.
encapsulation extended-vlan-vpls;
unit logical-unit-number {
vlan-id number;
......
}
......
}
}
protocols
layer2-control {
bpdu-block
interface interface-name;
disable-timeout seconds;
}
}
Understanding Root Protection for Spanning-Tree Instance Interfaces in a Layer 2
Switched Network on page 429
Understanding BPDU Protection for Spanning-Tree Instance Interfaces on page 423
BPDU Protection for Individual Spanning-Tree Instance Interfaces
On ACX Series routers, MX Series routers, and EX Series switches, you can configure
BPDU protection to ignore BPDU received on interfaces where none should be expected.
If a BPDU is received on a blocked interface, the interface is disabled and stops forwarding
frames. By default, all BPDUs are accepted and processed on all interfaces.
To configure BPDU protection for all edge ports for a particular spanning-tree protocol:
Enable edge port blocking for a particular spanning-tree protocol:
1.
[edit]
user@host# set protocols (STP Type) (mstp | rstp | vstp)
Verify BPDU protection for edge ports:
2.
[edit]
protocols (STP Type) {
(mstp | rstp | vstp) {
bpdu-block-on-edge;
}
}
Chapter 12: Configuring Layer 2 Control Protocol
bpdu-block-on-edge
425