Where to run BPDU filtering....

[jimmysands73_2]

I uinderstand BDPU guard and where to run it...but where would you run BPDU Filtering and why?  Meaing in the real world....

[cadet alain]

Hi,

Personnaly I wouldn't use BPDU filter on PortFast ports because as soon as they receive a BPDU they lose their PortFast status and  why not configure access ports with PortFast so then stick with BPDU guard.

I really don't see the advantages/use of BPDU filter vs BPDU guard so if experts here could answer your question they at the same time clear my thoughts about this feature.

Alain.

[Eugene Khabarov · Accepted solution]

This is not good idea to use bpdufilter with portfast since it can lead to unconditional loops in your network by unauthorized switches/hubs connected to this ports.

The better example to add bpdufilter is a link between PE-CE if you certainly know that you have single connection between your vlans with ISP/customer.

This is since you can't know exactly the policy on the other side. Some ISPs uses bpduguard for example and as soon as your connnects your switch to ISP it will be errdisabled. Another strong reason is you wouldn't share your STP topology with customer/ISP.

__

HTH. Please rate this post if it was helpful. If this solves your problem, please mark this post as "Correct Answer"

[jimmysands73_2]

Thank you both.

Cadat...here is another link (you might have been following) for more info on this.

https://learningnetwork.cisco.com/message/188774#188774