topic Brocade vdx 6740 bpdu filter in Data Center (VDX)

Brocade vdx 6740 bpdu filter

stefantomasevic — Mon, 17 Jul 2023 09:39:29 GMT

What is the command for bpdu filter?

I am trying to configure bpdu filter on access port and portchannel interface and only what I was found is

bpdu-drop enable all

but with error

BR1(conf-if-te-1/0/7)# bpdu-drop enable all

%% Error: This configuration is not allowed when spanning tree protocol is configred this is interface configuration

BR1# show running-config interface TenGigabitEthernet 1/0/7

interface TenGigabitEthernet 1/0/7

description 995

switchport

switchport mode access

switchport access vlan 995

no spanning-tree shutdown

fabric isl enable

fabric trunk enable

no shutdown

Spanning tree protocol is rapid per vlan spanning tree

Re: Brocade vdx 6740 bpdu filter

stefantomasevic — Mon, 17 Jul 2023 09:46:45 GMT

In a nutshell, I want to configure and protect my switch from customers one so no BPDU can enter in or going out of my network.

Re: Brocade vdx 6740 bpdu filter

Truyen_Phan — Mon, 17 Jul 2023 23:39:45 GMT

Under the interface, please run "spanning-tree shutdown" to disable spanning tree on the interface which will prevent it from participating in STP.

Re: Brocade vdx 6740 bpdu filter

stefantomasevic — Thu, 20 Jul 2023 09:35:33 GMT

Nope, it does not work even when I shut down spanning-tree at interface level

Only spanning-tree edgeport bpdu-filter command, but I am not sure does it work what I want. And I want to drop all BPDU from customer switch in order to protect my network.

BR1# show running-config interface TenGigabitEthernet 1/0/7
interface TenGigabitEthernet 1/0/7
description 995
switchport
switchport mode access
switchport access vlan 995
spanning-tree edgeport bpdu-filter
spanning-tree shutdown
no fabric isl enable
fabric trunk enable
shutdown

BR1(config)# interface TenGigabitEthernet 1/0/7

BR1(conf-if-te-1/0/7)# bpdu-drop enable all
%% Error: This configuration is not allowed when spanning tree protocol is configred

Re: Brocade vdx 6740 bpdu filter

Truyen_Phan — Wed, 26 Jul 2023 01:11:50 GMT

Yes, that should be correct. With 'spanning-tree edgeport bpdu-filter', it will prevent BPDUs from being transmitted out on the interface and drop it on received.