Spanning-Tree Bpduguard - Cisco ME 3400 Command Reference Manual

Ethernet access switch

Hide thumbs Also See for ME 3400:

Table of Contents

spanning-tree bpduguard

Use the spanning-tree bpduguard interface configuration command on a network node interface (NNI)

or enhanced network interface (ENI) with STP enabled to put the interface in the error-disabled state

when it receives a bridge protocol data unit (BPDU). Use the no form of this command to return to the

default setting.

Syntax Description

BPDU guard is disabled.

Command Modes

Interface configuration

Command History

Usage Guidelines

Spanning Tree Protocol (STP) is not supported on user network interfaces (UNIs). You can configure

BPDU guard only on NNIs or on ENIs on which STP has been enabled. To set a port as an NNI or ENI,

enter the port-type {nni | eni} interface configuration command. To enable STP on an ENI, enter the

spanning-tree interface configuration command.

The BPDU guard feature provides a secure response to invalid configurations because you must

manually put the STP port back in service. Use the BPDU guard feature in a service-provider network

to prevent an interface from being included in the spanning-tree topology.

You can enable the BPDU guard feature when the switch is operating in the per-VLAN spanning-tree

plus (PVST+), the rapid-PVST+, or the multiple spanning-tree (MST) mode.

You can globally enable BPDU guard on all Port Fast-enabled STP ports by using the spanning-tree

portfast bpduguard default global configuration command.

You can use the spanning-tree bpduguard interface configuration command on an STP port to override

the setting of the spanning-tree portfast bpduguard default global configuration command.

This example shows how to enable the BPDU guard feature on a port:

Switch(config)# interface gigabitethernet0/1

Switch(config-if)# spanning-tree bpduguard enable

You can verify your setting by entering the show running-config privileged EXEC command.

Cisco ME 3400 Ethernet Access Switch Command Reference

spanning-tree bpduguard {disable | enable}

no spanning-tree bpduguard

Disable BPDU guard on the specified STP port.

Enable BPDU guard on the specified STP port.

Modification

This command was introduced.

Chapter 2 Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands