Browse Community
Language
Help
Sign In
Posts
Users
Search
hendle
updated
15 years ago
1 Message
0
3116
September 1st, 2011 12:00
Hello,
I`d like to know how to block stp( 01:80:C2:00:00:00) pvst+(01:00:0c:cc:cc:cd) and other STP protocols using policy map on 6224,6224F and 5448.
Responses (1)
Solutions (0)
bh1633
909 Posts
188
Posted September 1st, 2011 13:00
This will create a MAC access control list that blocks all Cisco protocols (Cisco protocols have a destination MAC address starting with “0100.0CCC.CCC”. The MAC access control list is then applied to vlans 5,6,10,11.
mac access-list extended blockCisco
deny 0000.0000.0000 FFFF.FFFF.FFFF 0100.0CCC.CCC0 0000.0000.000F
permit any any
exit
interface range vlan 5,6,10,11
mac access-group blockCisco in 1
You can extend this example to block whatever you would like. For standard STP, look at 'spannin-tree bpdu filtering/flooding" command.
Self Repair, Upgrade & Maintain
Diagnostics and Tools
Drivers & Downloads
Solve
Customer Care
7
1
XPS
21
2
Dell Pro Max Laptops
15
Precision Fixed Workstations
35
19
4
View More
bh1633
909 Posts
188
0
Posted September 1st, 2011 13:00
This will create a MAC access control list that blocks all Cisco protocols (Cisco protocols have a destination MAC address starting with “0100.0CCC.CCC”. The MAC access control list is then applied to vlans 5,6,10,11.
mac access-list extended blockCisco
deny 0000.0000.0000 FFFF.FFFF.FFFF 0100.0CCC.CCC0 0000.0000.000F
permit any any
exit
interface range vlan 5,6,10,11
mac access-group blockCisco in 1
exit
You can extend this example to block whatever you would like. For standard STP, look at 'spannin-tree bpdu filtering/flooding" command.