cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
975
Views
0
Helpful
1
Replies

ASA5506 Spanning Tree Protocol problem

petsoft.eu
Beginner
Beginner
Hi
When I have boot system disk0:/asa961-lfbff-k8.SPA on ASA5506 and
setup:
access-list ERTHER ethertype deny bpdu
access-group ERTHER in interface outside
access-group ERTHER in interface inside
my ASA do not populate Spanning Tree Protocol to the router. Every thing work well.
After upgrade to:
boot system disk0:/asa981-lfbff-k8.SPA
Spanning Tree Protocol block router port under Spanning Tree attack.
Setup "ethertype deny bpdu" does not work any more.
Where is the problem ??
1 Reply 1

Dennis Mink
Advisor
Advisor

how did you configure the port on the router, connecting the asa?  as a trunk port running stp? if so the router will send bpdu's so the asa will shit the port.

 

if you have layer3 interfaces towards the router, then dont worry about spanning tree.

Please remember to rate useful posts, by clicking on the stars below.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers