external L2 ethernet connections

Adam Davenport adam at choopa.com
Fri Feb 20 14:59:00 UTC 2009

If you're using a Cisco device on your side, you'll likely want to 
disable MOP as well:


Adam Davenport / adam at choopa.com
www.choopa.com / 1.866.2.CHOOPA

Joe Maimon wrote:
> Does anyone have a best practice list of things to disable/filter/turn 
> off on ethernet ports l2 connected to other AS's
> cdp
> stp
> switchport negotiate
> vtp
> if trunking, limit vlans, no vlan1
> So on so forth.
> Switches do so many darn things all by themselves, as any packet 
> capture shows.
> Thanks,
> Joe

More information about the NANOG mailing list