beautypg.com

Spanning tree bpdu support, An example bpdu relaying scenario – Amer Networks E5Web GUI User Manual

Page 353

background image

7.

Go to: Policies > Add > IPRule

8.

Now enter:

Name: http_wan_to_dmz

Action: Allow

Service: http

Source Interface: wan

Destination Interface: dmz

Source Network: all-nets

Destination Network: wan_ip

9.

Click OK

4.8.4. Spanning Tree BPDU Support

cOS Core includes support for relaying the Bridge Protocol Data Units (BPDUs) across the Clavister
Security Gateway. BPDU frames carry Spanning Tree Protocol (STP) messages between layer 2
switches in a network. STP allows the switches to understand the network topology and avoid
the occurrences of loops in the switching of packets.

The diagram below illustrates a situation where BPDU messages would occur if the administrator
enables the switches to run the STP protocol. Two Clavister Security Gateways are deployed in
transparent mode between the two sides of the network. The switches on either side of the
security gateway need to communicate and require cOS Core to relay switch BPDU messages in
order that packets do not loop between the gateways.

Chapter 4: Routing

353

This manual is related to the following products: