You can configure BPDU protection on individual interfaces or on all the edge ports of
the bridge.
Related
Documentation
Configuring BPDU Protection for Spanning-Tree Instance Interfaces on page 424•
• Configuring BPDU Protection on All Edge Ports on page 425
• Understanding Root Protection for Spanning-Tree Instance Interfaces in a Layer 2
Switched Network on page 429
• Understanding VPLS Multihomed Layer 2 Ring and MPLS Infrastructure
Configuring BPDU Protection for Spanning-Tree Instance Interfaces
On the ACX Series routers, MX Series routers, and EX Series switches, you can configure
BPDU protection to ignore BPDU received on interfaces where none should be expected.
If a BPDU is received on a blocked interface, the interface is disabled and stops forwarding
frames. By default, all BPDUs are accepted and processed on all interfaces.
To configure BPDU protection for individual spanning-tree instance interfaces:
1. Enable BPDU protection on a specific spanning-tree instance interface:
[edit]
user@host# edit protocols layer2-control bpdu-block
user@host# set interface interface (aex | (ge-fpc/pic/port | xe-fpc/pic/port)
If a BPDU is received on the interface, the system will disable the interface and stop
forwarding frames out the interface until the bridging process is restarted.
2. (Optional) Configure the amount of time the system waits before automatically
unblocking this interface after it has received a BPDU:
[edit protocols layer2-contorl bpdu-block interface interface-name]
user@host# set disable-timeout seconds
The range of the seconds option value is from 10 through 3600 seconds (one hour).
A seconds option value of 0 is allowed, but this results in the default behavior (the
interface is blocked until the interface is cleared).
3.
Verify the configuration of BPDU blocking for individual interfaces:
[edit]
interfaces {
ge-fpc/pic/port { # VLAN encapsulation on a Gigabit Ethernet.
encapsulation (ethernet-bridge | ethernett-vpls | extended-vlan-bridge |
extended-vlan-vpls | vlan-bridge| vlan-vpls);
}
xe-fpc/pic/port { # VLAN encapsulation on 10-Gigabit Ethernet.
encapsulation (ethernet-bridge | ethernett-vpls | extended-vlan-bridge |
extended-vlan-vpls | vlan-bridge| vlan-vpls);
}
Copyright © 2017, Juniper Networks, Inc.424
ACX Series Universal Access Router Configuration Guide
To Next Page
Loading...
Need help?
General
