HP 3500 Series Advanced Traffic Management Manual page 138

Multiple Instance Spanning-Tree Operation
Configuring MSTP
STP Domain
BPDU protection
Figure 3-7. Example of BPDU Protection Enabled at the Network Edge
C a u t i o n
3-30
End User
The following commands allow you to configure BPDU protection.
Syntax: [no] spanning-tree <port-list> bpdu-protection
Enables/disables the BPDU protection feature on a port
Syntax: [no] spanning-tree bpdu-protection-timeout <timeout>
Configures the duration of time when protected ports receiving
unauthorized BPDUs will remain disabled. The default value of
0 (zero) sets an infinite timeout (that is, ports that are disabled
by bpdu-protection are not, by default, re-enabled automatically).
(Range: 0-65535 seconds; Default: 0)
Syntax: [no] spanning-tree trap errant-bpdu
Enables/disables the sending of errant BPDU traps.
This command should only be used to guard edge ports that are not expected
to participate in STP operations. Once BPDU protection is enabled, it will
disable the port as soon as any BPDU packet is received on that interface.
SNMP Trap
SNMP Trap
SNMP Trap
Switch
Event Log: port X is disable by STP
Management
Station
Fake STP BPDU