Configuring Bpdu Protection - HP 3500 Series Advanced Traffic Management Manual

HP Switch(config)# show spanning-tree a9 config
...
Port Type
----- --------- + --------- ----- ----- ----- ----- ------ ------ ------ ----
A9 100/1000T | Auto
Figure 3-5. Example of BPDU Filter in Show Spanning Tree Configuration Command
HP Switch(config)# show configuration
. . .
spanning-tree
spanning-tree A9 bpdu-filter
spanning-tree C7 bpdu-filter
spanning-tree Trk2 priority 4
. . .
Figure 3-6. Example of BPDU Filters in the Show Configuration Command
For example, to configure BPDU filtering on port a9, enter:
HP Switch(config)# spanning-tree a9 bpdu-filter
Viewing BPDU Filtering. The spanning-tree show < port> configuration
command displays the BPDU's filter state.
| Path Prio
| Cost rity
128
BPDU filters per port are displayed as separate entries of the spanning tree
category within the configuration file.

Configuring BPDU Protection

BPDU protection is a security feature designed to protect the active STP
topology by preventing spoofed BPDU packets from entering the STP domain.
In a typical implementation, BPDU protection would be applied to edge ports
connected to end user devices that do not run STP. If STP BPDU packets are
received on a protected port, the feature will disable that port and alert the
network manager via an SNMP trap as shown in Figure 3-7.
Multiple Instance Spanning-Tree Operation
Column showing BPDU filter status
Admin Auto Admin Hello
Edge Edge PtP
No Yes True
Rows showing ports with BPDU filters enabled
Configuring MSTP
Root TCN
Time Guard Guard
Global No No
BPDU
Flt
Yes
3-29