Why would a router really care about BPDU's? And with CDP you can run "no cdp enable" or "no cdp run" on both the router and the switch so I am not sure why it really needs to be a function on the CPPr features. I don't think Cisco needs to develop stuff just for the heck of it ;).
Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: <mailto:[email protected]> [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: <http://www.ipexpert.com/chat> www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at <http://www.ipexpert.com/communities> www.ipexpert.com/communities and our public website at <http://www.ipexpert.com/> www.ipexpert.com From: [email protected] [mailto:[email protected]] On Behalf Of Eugene Pefti Sent: Tuesday, November 16, 2010 12:34 AM To: 'Kingsley Charles'; [email protected] Subject: Re: [OSL | CCIE_Security] class maps for arp and cdp packets And it just occurred to me. Let's say I want to filter all BPDU traffic from switches connected to the router. Just theoretically. "match protocol bpdu" doesn't exist. Does it mean that I can't filter BPDU with CPPr whatsoever ? Eugene From: [email protected] [mailto:[email protected]] On Behalf Of Kingsley Charles Sent: Monday, November 15, 2010 7:12 AM To: [email protected] Subject: [OSL | CCIE_Security] class maps for arp and cdp packets Hi all I want to drop ARP and CDP packets coming to router using control plane cef-exception interface. As you may be aware that CPPr doesn't support class maps with protocol recognization i.e., using "match protocol" I am not able to find options to define an ACL for CDP and ARP. Any thoughts? With regards Kings
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
