Enabling Bpdu Guard; Enabling Portfast Bpdu Filtering - Cisco 4500M Software Manual

Enabling BPDU Guard

Enabling BPDU Guard
To enable BPDU guard to shut down PortFast-configured interfaces that receive BPDUs, perform this
task:
Command
Step 1
Switch(config)# [no] spanning-tree portfast
bpduguard
Step 2
Switch(config)# end
Step 3
Switch# show spanning-tree summary totals
This example shows how to enable BPDU guard:
Switch(config)# spanning-tree portfast bpduguard
Switch(config)# end
Switch#
This example shows how to verify the BPDU configuration:
Switch# show spanning-tree summary totals
Root bridge for: none.
PortFast BPDU Guard is enabled
Etherchannel misconfiguration guard is enabled
UplinkFast is disabled
BackboneFast is disabled
Default pathcost method used is short
Name
-------------------- -------- --------- -------- ---------- ----------
Switch#

Enabling PortFast BPDU Filtering

To enable PortFast BPDU filtering globally, perform this task:
Command
Step 1
Switch(config)# spanning-tree portfast bpdufilter default
Step 2
Switch# show spanning-tree summary totals
This example shows how to enable PortFast BPDU filtering on a port:
Switch(config)# spanning-tree portfast bpdufilter default
Switch(config)# Ctrl-Z
Software Configuration Guide—Release 12.2(25)EW
15-12
Blocking Listening Learning Forwarding STP Active
34 VLANs 0 0
Chapter 15
Purpose
Enables BPDU guard on all the switch's
PortFast-configured interfaces.
You can use the no keyword to disable BPDU guard.
Exits configuration mode.
Verifies the BPDU configuration.
0 36 36
Purpose
Enables BPDU filtering globally on the
switch.
Verifies the BPDU configuration.
Configuring STP Features
OL-6696-01