Configuring Bpdu Protection On Spanning Tree Interfaces - Juniper EX9200 Features Manual

Spanning-Tree Protocols Feature Guide for EX9200 Switches

Configuring BPDU Protection on Spanning Tree Interfaces

Related
Documentation
230
NOTE: This topic applies to Junos OS for EX Series and QFX switches with
support for the Enhanced Layer 2 Software (ELS) configuration style. For
ELS details, see Getting Started with Enhanced Layer 2 Software.
You can configure BPDU protection to ignore BPDU received on interfaces where none
should be expected. If a BPDU is received on a blocked interface, the interface is disabled
and stops forwarding frames. By default, all BPDUs are accepted and processed on all
interfaces.
To configure BPDU protection for spanning-tree instance interfaces:
On a specific spanning-tree interface:
To enable BPDU protection on a specified spanning-tree interface:
1.
[edit protocols layer2-control
user@switcht# set interface (aex | (ge-fpc/pic/port | xe-fpc/pic/port)
If a BPDU is received on the interface, the system will disable the interface and stop
forwarding frames out the interface until the bridging process is restarted.
(Optional) Configure the amount of time the system waits before automatically
2.
unblocking this interface after it has received a BPDU.
[edit protocols layer2-contorl bpdu-block interface interface-name]
user@switch# set disable-timeout seconds
The range of the seconds option value is from 10 through 3600 seconds (one hour).
A seconds option value of
interface is blocked until the interface is cleared).
To disable BPDU protection for a specific spanning-tree interface
[edit protocols layer2-contorl bpdu-block interface interface-name]
user@switch# set disable-timeout seconds
Understanding BPDU Protection for Spanning-Tree Instance Interfaces
BPDU Protection for Individual Spanning-Tree Instance Interfaces
clear error bpdu interface on page 250
bpdu-block ]
0 is allowed, but this results in the default behavior (the
Copyright © 2017, Juniper Networks, Inc.