Advanced Traffic Management Guide K/KA/KB.15.15

Enables/disables the sending of errant BPDU traps.
CAUTION: This command should only be used to guard edge ports that are not expected to
participate in STP operations. Once BPDU protection is enabled, it will disable the port as soon
as any BPDU packet is received on that interface.
Viewing BPDU protection status
Syntax:
show spanning-tree bpdu-protection [port-list]
Displays a summary listing of ports with BPDU protection enabled. To display
detailed per-port status information, enter the specific port number(s). BPDU protected
ports are displayed as separate entries of the spanning tree category within the
configuration file.
Example 100 Viewing BPDU protection status for specific ports
HP Switch#: show spanning-tree bpdu-protection 23-24
Status and Counters - STP BPDU Protection Information
BPDU Protection Timeout (sec) : 0
BPDU Protected Ports : 23-24
Port Type Protection State Errant BPDUs
------ --------- ---------- ----------------- ------------
23 100/1000T Yes Bpdu Error 1
24 100/1000T Yes 0
Re-enabling a port blocked by BPDU protection
Ports disabled by BPDU Protection remain disabled unless BPDU Protection is removed from the
switch or by configuring a nonzero BPDU protection timeout. For example, if you want to re-enable
protected ports 60 seconds after receiving a BPDU, you would use this command:
HP Switch(config)#: spanning-tree bpdu-protection-timeout 60
Allowing traffic on VLAN ID (PVID) mismatched links
When RPVST+ is running in the default configuration on a link where there is a VLAN ID mismatch,
PVST blocks the link, resulting in traffic on the mismatched VLANs being dropped. However, there
can be instances where traffic passing between mismatched VLANs on a link is desirable. When
enabled on the switch, the ignore-pvid-inconsistency command allows this behavior. That
is, where the ports on both ends of a point-to-point link are untagged members of different VLANs,
enabling ignore-pvid-inconsistency enables RPVST+ to process untagged RPVST+ BPDUs
belonging to the peer’s untagged VLAN as if it was received on the current device’s untagged
VLAN
Syntax:
[no] spanning-tree ignore-pvid-inconsistency
Causes the switch to ignore per-VLAN ID inconsistencies when the ports on both
ends of a point-to-point link are untagged members of different VLANs, thus allowing
RPVST+ to run on the mismatched links. On a given switch, this affects all ports
belonging to VLANs on which RPVST+ is enabled.
Allowing traffic on VLAN ID (PVID) mismatched links 139