Allied Telesis AlliedWare Plus 5.2.1 - Manual (Page 3)

Allied Telesis www.alliedtelesis.com
AlliedWare Plus TM | Operating System
Bridge Protocol Data Unit (BPDU) Protection
BPDU Protection adds extra security to the
Spanning Tree Protocol (STP). It protects the
spanning tree configuration by preventing
malicious DoS attacks caused by spoofed BPDUs.
BPDU Protection is designed to be enabled on
ports that should not receive BPDUs.These are
edge ports connected to end user devices that do
not run spanning tree. If a spoofed BPDU packet
is received on a protected port, the BPDU
Protection feature disables the port and alerts the
network manager.
VLAN Double Tagging
VLAN double tagging allows network service
providers to use a single VLAN to support
customers with multiple VLANs. In this way, they
can simply and cost-effectively offer IP-based
solutions in scalable implementations.
Service providers often have customers whose
VLAN range requirements overlap, and the traffic
from different customers is mixed in with the
service providers' infrastructure. With VLAN
double tagging, each customer is given a
customer-ID (CID), which is a unique identifier
within the service provider infrastructure.Traffic
from individual customers is tagged with the CID
and segregated from other customer's traffic.The
VLANs identification of the customer's network
can be preserved while the traffic is tunnelled
through the network service provider's
infrastructure.