Disabling BPDU Guard and Port BDPDU Filter on VXLAN Interfaces

  • 1
  • Problem
  • Updated 4 days ago
I've been playing around with STP and VXLAN interfaces for a corner use case on Cumulus VRX 3.5.3.  I've noticed that when you create a VXLAN interface using:

net add vxlan vtep01 vxlan 10100

the following gets added to the interfaces file:

iface vtep02
        bridge-access 1
        mstpctl-bpduguard yes
        mstpctl-portbpdufilter yes
        vxlan-id 10100

which seems to enable bpdu guard and bpdufilter by default.  I need to remove these settings, i.e., disable them.

net del vxlan vtep01 stp bpduguard
net del vxlan vtep01 stp portbpdufilter

will remove these from the interface configuration file with no issues.  However, when you check the port configuration with:

mstpctl showportdetails bridge vtep01

they are both still enabled :-(

As a workaround you can manually remove them with:

mstpctl setbpduguard bridge vtep01 no
mstpctl setportbpdufilter bridge vtep01 no
Photo of ben koehler

ben koehler

  • 70 Points

Posted 4 days ago

  • 1

Be the first to post a reply!