topic Transparent ASA BPDU issue in Network Security

Transparent ASA BPDU issue

mj11 — Tue, 12 Mar 2019 05:30:56 GMT

Hi All

Hopefully someone will be able to help, I have an ASA running 8.4 in Multi-context transparent mode.

The problem I am seeing this is passing BPDU (I see this is expect in this mode) which is making the network converge.

Which is the best way to stop this, I had thought an ACL on the ASA but I think you can have only 1 type.

Many thanks MJ

Rishabh Seth — Wed, 18 Feb 2015 07:17:08 GMT

You are right, you cannot mix different types of access lists.

Here is what I can think as a workaround to achieve your requirement.

>>Try creating a different access-list to block BPDU and apply it on different interface.

For eg:

Say you have two acl:

access-list 1 ethertype deny bpdu

access-list 1 ethertype permit any

access-list 2 extended permit ip any any

>>you can apply acl 1 at one interface to block bpdu

>>and acl 2 on the other interface to filter other traffic.

So, by doing this you will inspecting same traffic flow at two different interfaces by different type of ACLs.

Hope it helps!!

mj11 — Thu, 19 Feb 2015 11:19:52 GMT

Thanks for the response, I will let you know how I get on.

Thanks