Cisco Catalyst 2950 Command Reference Manual page 502

spanning-tree portfast (global configuration)
Enabling BPDU filtering on an interface is the same as disabling spanning tree on it and can result in
Caution
spanning-tree loops.
Use the spanning-tree portfast bpduguard default global configuration command to globally enable
BPDU guard on ports that are in a Port Fast-operational state. In a valid configuration, Port Fast-enabled
ports do not receive BPDUs. Receiving a BPDU on a Port Fast-enabled port signals an invalid
configuration, such as the connection of an unauthorized device, and the BPDU guard feature puts the
port in the error-disabled state. The BPDU guard feature provides a secure response to invalid
configurations because you must manually put the port back in service. Use the BPDU guard feature in
a service-provider network to prevent an access port from participating in the spanning tree.
You can override the spanning-tree portfast bpduguard default global configuration command by
using the spanning-tree bdpuguard interface configuration command.
Use the spanning-tree portfast default global configuration command to globally enable the Port Fast
feature on all nontrunking ports. Configure Port Fast only on ports that connect to end stations;
otherwise, an accidental topology loop could cause a data packet loop and disrupt switch and network
operation. A Port Fast-enabled port moves directly to the spanning-tree forwarding state when linkup
occurs without waiting for the standard forward-delay time.
You can override the spanning-tree portfast default global configuration command by using the
spanning-tree portfast interface configuration command. You can use the no spanning-tree portfast
default global configuration command to disable Port Fast on all ports unless they are individually
configured with the spanning-tree portfast interface configuration command.
Examples This example shows how to globally enable the BPDU filtering feature:
Switch(config)# spanning-tree portfast bpdufilter default
This example shows how to globally enable the BPDU guard feature:
Switch(config)# spanning-tree portfast bpduguard default
This example shows how to globally enable the Port Fast feature on all nontrunking ports:
Switch(config)# spanning-tree portfast default
You can verify your settings by entering the show running-config privileged EXEC command.
Related Commands Command
show running-config
spanning-tree bpdufilter
spanning-tree bpduguard
spanning-tree portfast (interface
configuration)
Catalyst 2950 and Catalyst 2955 Switch Command Reference
2-474
Chapter 2
Description
Displays the current operating configuration. For syntax
information, select Cisco IOS Configuration Fundamentals
Command Reference for Release 12.1 > Cisco IOS File
Management Commands > Configuration File Commands.
Prevents a port from sending or receiving BPDUs.
Puts a port in the error-disabled state when it receives a BPDU.
Enables the Port Fast feature on an interface in all its associated
VLANs.
Catalyst 2950 and 2955 Cisco IOS Commands
0L-10102-01