Hey King,

STP and PVST should be matched on lsa type 0xaaaa I am not mistaken
Ethertype should be 0x10b I think.

On Tue, Jun 7, 2011 at 8:57 AM, Kingsley Charles <[email protected]
> wrote:

> Hi all
>
> I am using VACLs to block ARP in vlan X using the following command. This
> is going to block all non-ip traffic including the STP BPDUs. What is needed
> to permit the STP BPDUs to prevent looping?
>
> mac access-list extended king
> permit any any 0x0806
>
> vlan access-map king
> match mac address
> action drop
>
> vlan filter king vlan-list 123
>
>
>
>
> With regards
> Kings
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
> Are you a CCNP or CCIE and looking for a job? Check out
> www.PlatinumPlacement.com
>



-- 
Bruno Fagioli (by Jaunty Jackalope)
Cisco Security Professional
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to