Brocade vdx 6740 bpdu filter

[stefantomasevic]

What is the command for bpdu filter?

I am trying to configure bpdu filter on access port and portchannel interface and only what I was found is

bpdu-drop enable all

but with error

BR1(conf-if-te-1/0/7)# bpdu-drop enable all

%% Error: This configuration is not allowed when spanning tree protocol is configred this is interface configuration

BR1# show running-config interface TenGigabitEthernet 1/0/7

interface TenGigabitEthernet 1/0/7

description 995

switchport

switchport mode access

switchport access vlan 995

no spanning-tree shutdown

fabric isl enable

fabric trunk enable

no shutdown

!

Spanning tree protocol is rapid per vlan spanning tree

[Truyen_Phan]

Yes, that should be correct. With 'spanning-tree edgeport bpdu-filter', it will prevent BPDUs from being transmitted out on the interface and drop it on received. 

[Truyen_Phan]

Under the interface, please run "spanning-tree shutdown" to disable spanning tree on the interface which will prevent it from participating in STP.

[stefantomasevic]

Nope, it does not work even when I shut down spanning-tree at interface level

Only spanning-tree edgeport bpdu-filter command, but I am not sure does it work what I want. And I want to drop all BPDU from customer switch in order to protect my network.

BR1# show running-config interface TenGigabitEthernet 1/0/7
interface TenGigabitEthernet 1/0/7
description 995
switchport
switchport mode access
switchport access vlan 995
spanning-tree edgeport bpdu-filter
spanning-tree shutdown
no fabric isl enable
fabric trunk enable
shutdown

BR1(config)# interface TenGigabitEthernet 1/0/7

BR1(conf-if-te-1/0/7)# bpdu-drop enable all
%% Error: This configuration is not allowed when spanning tree protocol is configred

[stefantomasevic]

In a nutshell, I want to configure and protect my switch from customers one so no BPDU can enter in or going out of my network.