Enable and Disable SLPP Guard through Vendor Specific Attributes

Simple Loop Prevention Protocol (SLPP) is an application that detects loops in an MLAG or Split Multi-link Trunking (SMLT) network on VOSS/BOSS switches. SLPP Guard helps prevent loops in networks by administratively disabling an edge port if a switch receives an SLPP PDU from an SMLT network.

When a new user is authenticated by netlogin, the enable attribute of SLPP Guard is given to netlogin. Netlogin processes this attribute and sends the enable attribute message to the SLPP Guard module. If all users are unauthenticated by netlogin, a disable message for the port is sent to SLPP Guard. At the time of re-authentication, if the FA-Service-Request = SLPPGUARD is removed from the RADIUS server, then netlogin sends an SLPP Guard disable message.

The status is enabled and the entry in the save configuration is enable slpp guard port port_list for the following scenarios:

• If the status of SLPP Guard is enabled by the CLI.
• If the status of SLPP Guard is enabled by both the Vendor Specific Attribute (VSA) and by the CLI.
• If after enabling SLPP Guard by the CLI, the status is then disabled from the VSA.

The status is enabled and the save configuration contains default values for the following scenarios:

• If the status of SLPP Guard is enabled by the VSA.
• If after enabling SLPP Guard by the VSA, the status is then disabled from the CLI.

Supported Platforms

ExtremeSwitching X435, X450-G2, X460-G2, X670-G2, X440-G2, X465, X590, X620, X690, X695, X870, 5420, 5520 series switches.