HPE Aruba Networking & ProVision-based
1822562 Members
3242 Online
109642 Solutions
New Discussion

Procurve 2824 BPDU filter and Root Guard

 
aurimas
Advisor

Procurve 2824 BPDU filter and Root Guard

Hi,

 

we have spaning tree enabled, but I looked at the manuals and was not able to find any commands how to enable  BPDU filter and Root Guard.

 

SWITCH# show spanning-tree:

 

Port Type      Cost  Priority State      | Designated Bridge
  ---- --------- ----- -------- ---------- + -----------------
  1    100/1000T 10    128      Forwarding | 001f37-08c550

 

SWITCH# show spanning-tree bpdu-protection
Invalid input: bpdu

 

Does my switch support BPDU filter and Root Guard?

thanks

6 REPLIES 6
Richard Brodie_1
Honored Contributor

Re: Procurve 2824 BPDU filter and Root Guard

I don't think it does; it's been EOL for a few years now.

paulgear
Esteemed Contributor

Re: Procurve 2824 BPDU filter and Root Guard

Check your firmware level; i have a client with a J4903A (2824) on firmware I.10.77 and it definitely supports BPDU guard and filter.

 

Correct syntax for configuring it is:

 

spanning-tree [port range] { bpdu-filter | bpdu-protection }

 

Hope this helps.

Regards,
Paul
aurimas
Advisor

Re: Procurve 2824 BPDU filter and Root Guard

my firmware:

 

 J4903A Configuration Editor; Created on release #I.10.43

 

so should I upgrade firmware version and will be able to set BPDU filter and Root Guard?

 

thanks

Richard Brodie_1
Honored Contributor

Re: Procurve 2824 BPDU filter and Root Guard

You should be able to set BPDU protection on your current version (although an upgrade probably wouldn't hurt). I'm still not convinced about root-guard though.

paulgear
Esteemed Contributor

Re: Procurve 2824 BPDU filter and Root Guard

Sorry - i misread the post. Root guard is not available on the 2824 to my knowledge, only BPDU filter (which drops STP BPDUs) and BPDU protection (which disables ports if they receive STP BPDUs).
Regards,
Paul
aurimas
Advisor

Re: Procurve 2824 BPDU filter and Root Guard

yes, I also think that my current version should allow BPDU filters as per this guide:

http://bizsupport1.austin.hp.com/bc/docs/support/SupportManual/c02564225/c02564225.pdf

Release I.08.108 Enhancements

Enhancement (PR_1000346164) — RSTP/MSTP BPDU Protection enhancement. When

this feature is enabled on a port and that port receives a spanning tree BPDU, the switch will

disable (drop link) the port, log a message, and optionally, send an SNMP trap.

 

And my version release #I.10.43. It should support BDU filter, but if I run:

 

SWITCH1(config)# spanning-tree 19 bpdu-filter
Invalid input: bpdu-filter

 

cant understand what is wrong?