Unsolved
This post is more than 5 years old
1 Message
0
3110
September 1st, 2011 12:00
6224F blocking STP
Hello,
I`d like to know how to block stp( 01:80:C2:00:00:00) pvst+(01:00:0c:cc:cc:cd) and other STP protocols using policy map on 6224,6224F and 5448.
No Events found!
bh1633
909 Posts
0
September 1st, 2011 13:00
This will create a MAC access control list that blocks all Cisco protocols (Cisco protocols have a destination MAC address starting with “0100.0CCC.CCC”. The MAC access control list is then applied to vlans 5,6,10,11.
mac access-list extended blockCisco
deny 0000.0000.0000 FFFF.FFFF.FFFF 0100.0CCC.CCC0 0000.0000.000F
permit any any
exit
interface range vlan 5,6,10,11
mac access-group blockCisco in 1
exit
You can extend this example to block whatever you would like. For standard STP, look at 'spannin-tree bpdu filtering/flooding" command.