BP God is one of multiple security mechanisms available in spending tree to protect your spending tree
network.
This could be something as simple as a user connecting a cheap consumer switch to a network that doesn't
support spending tree and hence causing a loop or something malicious such as an attacker plugging in
a switch and making that switch.
The root of the spending tree so that the attacker can analyze your network traffic that traverses that
switch or it could be an attack simply connecting a switch to your typology.
Lowering the priority and degrading the performance of your network considerably by forcing the network
traffic to go through a low performance switch.
So one of the options you have to stop this is BPT U-God which will disable a port if any BPT user received
on that port.
This is useful on ports that are going to be used as access ports and that should never be connected
to another switch.
In other words ports that are going to be configured as port for sports.
They are two ways to configure BPT U-God.
You can either do it on a per interface basis or configure it globally on a switch on a per port basis
you would top spending tree port first and then spending three BPT you God enable globally on the switch
you can use the C'mon spending tree Port Foster default to policy let's assume that this hubs shouldn't
be connected to the network.
And will enable Beaugard on switch to switch 3 because we shouldn't be receiving BPT use on any of these
ports these ports should be connected to use of PCs rather than a hub.
So comfy spending tree port Fost edge PPD
Galant we have globally enabled BPT God on switch to at the moment port gigabit.
0 1 is not enabled for Port fust and we can see that by using the C'mon show spending tree interface
interface gigabit 0 1 port Fost So it's disabled but known gigabit 0 1 let's top spending tree port
first
notice very quickly BPT God warns us that it be PDU is received on those port and the port has been
disabled so BPT you got error detected on this port Port is placed in the disabled state port has gone
down so show interface.
Gigabit 0 1 interfaces don't line protocol these don't because the port was error disabled.
Show spanning tree.
Notice the port is not shown in the output here.
If we look at gigabit 0 1 port Fosset we can see that no spending tree information is available in this
port because the port has been disabled shows spanning tree inconsistent ports
shows spanning trees summary we can see that the switches using rapid previous t and we can see that
port Fosset age BPT U-God default is enabled.
So shocked that port down and then no shut it.
And let's see what happens again again so no shut it noticed immediately.
The port is disabled so do show run interface.
Gigabit 0 1 we need to remove this port Foster command.
So no spending tree port Fosset
and do show run interface gigabit Zera one.
We've now removed port fust so shut the port down.
And no shut it.
Notice the port come up shows spanning tree blocked ports gigabit 01 one is now being blocked because
that port is an alternate port on this segment the designated port is gigabit zero or one on switch
three and we can see that by typing shows spending tree noticed gigabit at 0 1 is the designated port
on the segment.
This is a hub.
Please note.
So this is the designated port for this segment.
This port can give but 0 1 is blocking on switch 2.
So these ports should have been connected to PCs but if a user connected a hub with someone trying to
do something malicious BPT U-God block supports immediately.
Now we can configure this on a purport basis.
So let's do that on gigabit.
0 2 spanning tree BPT you PPD.
Gawd Abel
that is immediately BPT was received on the port Port goes to the disable mode.
So if you enable it on an interface the port doesn't even need to be configured as a port first port
when it BPT use received on the port.
It immediately disables.
So do show interface.
Gigabit 0 2 notice the port is down.
It's aero disabled.