ACI BPDU Filter

[joeharb]

We are migrating to ACI off of legacy Nexus switches.  We have a port that is connected to a downstream switch and have the following command in place in production:

"spanning-tree bpdufilter enable"

We have create a policy within ACI for bpdufilter to be enabled and created a Policy group referencing it.  When the connection is moved to ACI the port goes into a blocking state and the operation state is "BPDUGuard errDisable".

I have found some documentation that policy override might be need for this but I am not clear on how to deploy that or if anyone else has had similar issues...

Thanks in advance,

Joe

[RedNectar]

Hi @joeharb ,

Good luck sorting that out. Three years ago I had a similar question that still remains unanswered.

[joeharb]

Yes Chris, I did see the post and follow up, that is where I found the information about the override policy, but still not sure how to implement.  I am going to do some testing but will most likely need to get TAC involved.  Very surprised that others have not had this issue as well.

Thanks,

Joe

[joeharb · Accepted solution]

Just wanted to give an update on this issue, we moved the connection to an actual leaf instead of a Nexus 2K FEX port and applied the same policy and the port is working.  Must be something different on how the FEX handles it as opposed to the Leaf.

Thanks,

Joe