15-12
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
Chapter 15 Configuring STP Features
Enabling BPDU Guard
Enabling BPDU Guard
To enable BPDU guard to shut down PortFast-configured interfaces that receive BPDUs, perform this
task:
This example shows how to enable BPDU guard:
Switch(config)# spanning-tree portfast bpduguard
Switch(config)# end
Switch#
This example shows how to verify the BPDU configuration:
Switch# show spanning-tree summary totals
Root bridge for: none.
PortFast BPDU Guard is enabled
Etherchannel misconfiguration guard is enabled
UplinkFast is disabled
BackboneFast is disabled
Default pathcost method used is short
Name Blocking Listening Learning Forwarding STP Active
-------------------- -------- --------- -------- ---------- ----------
34 VLANs 0 0 0 36 36
Switch#
Enabling PortFast BPDU Filtering
To enable PortFast BPDU filtering globally, perform this task:
This example shows how to enable PortFast BPDU filtering on a port:
Switch(config)# spanning-tree portfast bpdufilter default
Switch(config)# Ctrl-Z
Command Purpose
Step 1
Switch(config)# [no] spanning-tree portfast
bpduguard
Enables BPDU guard on all the switch’s
PortFast-configured interfaces.
You can use the no keyword to disable BPDU guard.
Step 2
Switch(config)# end
Exits configuration mode.
Step 3
Switch# show spanning-tree summary totals
Verifies the BPDU configuration.
Command Purpose
Step 1
Switch(config)# spanning-tree portfast bpdufilter default
Enables BPDU filtering globally on the
switch.
Step 2
Switch# show spanning-tree summary totals
Verifies the BPDU configuration.