A network uses MSTP and has AOS-Switches at the access layer. The company wants edge ports on the access layer switches to meet these criteria:
✑ They prevent all rogue switches that run STP, RSTP, or MSTP from connecting to the network.
✑ If a rogue switch connects and is then replaced by a proper endpoint, the port recovers automatically without IT staff involvement.
How should the network administrator set up the edge ports to meet these requirements?
To meet the requirement of preventing rogue switches running STP, RSTP, or MSTP from connecting while allowing ports to recover automatically when a proper endpoint connects, the network administrator should enable BPDU protection with a timeout period on edge ports. BPDU protection blocks any incoming BPDUs from rogue switches and disables the port to prevent network issues. The timeout period ensures the port recovers automatically, allowing a proper endpoint to connect without IT staff involvement.
Would not filtering be a beter option, or is it a case of not allowing a switch to connect. bpdu-filter: basically ignore any BPDUs. They aren't sent out the port and anything coming in from a connected device is dropped. This allows you to connect a switch type device but it won't participate in STP. This also doesn't detect loops downstream from there so use such options with caution