topic RE: EXOS Policies: how to allow bpdu and VRRP? in ExtremeSwitching (EXOS/Switch Engine)

EXOS Policies: how to allow bpdu and VRRP?

Ilya_Semenov — Mon, 17 Oct 2016 19:16:00 GMT

Hello, everybody!

Could you please tell me Ethertype value for EMISTP?

I have to allow these packets in access rule applied to VLAN.

Should it be something like

entry EMISTP-BPDU { if match all {ethernet-type 0x???? ;
} then { permit ; } }

I would like also to allow VRRP. Would it be OK?

entry vrrp { if match all {
destination-address 224.0.0.18/32 ;
} then {
permit ;
}
}

Please, look at my rules...

Many thanks in advance,
Ilya

RE: EXOS Policies: how to allow bpdu and VRRP?

Ron_Huygens — Tue, 18 Oct 2016 11:02:00 GMT

Hi Ilya,

Your VRRP rule is correct.
For the STP BPDU's you can use :

entry EMISTP-BPDU { if match all {
ethernet-destination-address 01:00:0c??cc:cd;
} then {
permit ;
}
}

This should work.

RE: EXOS Policies: how to allow bpdu and VRRP?

Ilya_Semenov — Tue, 18 Oct 2016 14:31:00 GMT

Thanks, Ron!

Could you also tell me what traffic should I allow to permit PVST BPDUs?

Many thanks in advance,

Ilya

RE: EXOS Policies: how to allow bpdu and VRRP?

Henrique — Wed, 19 Oct 2016 00:35:00 GMT

Hi,

The destination-mac "01:00:0c??cc:cd" is related to PVST+ and "01:80:C2:00:00:00" related to EMISTP.

The policy rule would be:

entry PVST-BPDU { if {
ethernet-destination-address 01:00:0c??cc:cd;
} then {
permit;
}
}

entry EMISTP-BPDU {
if {
ethernet-destination-address 01:80:C2:00:00:00;
} then {
permit;
}
}