Configuring Bpdu Filtering; Configuring Bpdu Guard - Raisecom ISCOM2600G-HI (A) Series Configuration Manual

Table of Contents

Advertisement

Raisecom
ISCOM2600G-HI (A) Series Configuration Guide
The edge interface can change the interface status to forward quickly without any waiting
time. You had better configure the Ethernet interface connected to user client as edge interface
to make it quick to change to forward status.
The edge interface attribute depends on actual condition when it is in auto-detection mode;
the real port will change to false edge interface after receiving BPDU when it is in force-true
mode; when the interface is in force-false mode, whether it is true or false edge interface in
real operation, it will maintain the force-false mode until the configuration is changed.
By default, all interfaces on the ISCOM2600G-HI series switch are configured in auto-
detection attribute.
Configure the edge interface for the ISCOM2600G-HI series switch as below.
Step
1
2
3

2.7.14 Configuring BPDU filtering

After being enabled with BPDU filtering, the edge interface does not send BPDU packets nor
process received BPDU packets.
Configure BPDU filtering for the ISCOM2600G-HI series switch as below.
Step
1
2
3

2.7.15 Configuring BPDU Guard

On a switch, interfaces directly connected with non-switch devices, such as terminals (such as
a PC) or file servers, are configured as edge interfaces to implement fast transition of these
interfaces.
In normal status, these edge interfaces do not receive BPDUs. If forged BPDU attacks the
switch, the switch will configure these edge interfaces to non-edge interfaces when these edge
interfaces receive forged BPDUs and re-perform spanning tree calculation. This may cause
network vibration.
Command
Raisecom#config
Raisecom(config)#interface
interface-type interface-number
Raisecom(config-
gigaethernet1/1/port)#spanning-tree
edged-port { auto | force-true |
force-false }
Command
Raisecom#config
Raisecom(config)#interface
interface-type interface-number
Raisecom(config-
gigaethernet1/1/port)#spanning-tree
edged-port bpdu-filter enable
interface-type interface-number
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
Description
Enter global configuration mode.
Enter physical layer interface
configuration mode.
Configure attributes of the RSTP
edge interface.
Description
Enter global configuration mode.
Enter physical layer interface
configuration mode.
Enable BPDU filtering on the
edge interface.
2 Ethernet
107

Advertisement

Table of Contents
loading

Table of Contents