Clarification on bpdufilter vs bpduguard

Answered Question
Jun 5th, 2009

Hi,

On 3750 and 2950 ports in which hosts and servers will connect to, my intention is prevent loops in case people accidentally plug in devices (non hosts).

That said, if I enable 'spanning-tree bpdufilter' is there any need or benefit if I enable 'spanning-tree bpduguard' on same port?

It sounds like bpdufilter should take care of that situation since it does not send or receive BPDUs.

I have this problem too.
0 votes
Correct Answer by Giuseppe Larosa about 7 years 6 months ago

Hello Marlon,

it is the opposite:

BPDU guard is the right tool here.

with bpdufilter is enough to take a cross-over cable and to connect two ports to create a loop.

The key difference is that a port configured fro bpduguard still sends out its own bpdus so you connect two ports with bdpuguard with a crossover cable they detect each other and the loop can be avoided.

BPDU filter is more suited for service providers environments.

We use bpduguard combined with portfast and storm control.

Hope to help

Giuseppe

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Giuseppe Larosa Fri, 06/05/2009 - 08:51

Hello Marlon,

it is the opposite:

BPDU guard is the right tool here.

with bpdufilter is enough to take a cross-over cable and to connect two ports to create a loop.

The key difference is that a port configured fro bpduguard still sends out its own bpdus so you connect two ports with bdpuguard with a crossover cable they detect each other and the loop can be avoided.

BPDU filter is more suited for service providers environments.

We use bpduguard combined with portfast and storm control.

Hope to help

Giuseppe

Actions

This Discussion