Spanning-Tree Bpduguard - Cisco Catalyst 3560-X Command Reference Manual

Hide thumbs Also See for Catalyst 3560-X:

Table of Contents

Chapter 2 Catalyst 3750-X and 3560-X Cisco IOS Commands

spanning-tree bpduguard

Syntax Description

Command Modes

Command History

Usage Guidelines

Downloaded from

www.Manualslib.com

Use the spanning-tree bpduguard interface configuration command on the switch stack or on a

standalone switch to put an interface in the error-disabled state when it receives a bridge protocol data

unit (BPDU). Use the no form of this command to return to the default setting.

spanning-tree bpduguard {disable | enable}

no spanning-tree bpduguard

Disable BPDU guard on the specified interface.

Enable BPDU guard on the specified interface.

BPDU guard is disabled.

Interface configuration

The BPDU guard feature provides a secure response to invalid configurations because you must

manually put the interface back in service. Use the BPDU guard feature in a service-provider network

to prevent an interface from being included in the spanning-tree topology.

You can enable the BPDU guard feature when the switch is operating in the per-VLAN spanning-tree

plus (PVST+), rapid-PVST+, or the multiple spanning-tree (MST) mode.

You can globally enable BPDU guard on all Port Fast-enabled interfaces by using the spanning-tree

portfast bpduguard default global configuration command.

You can use the spanning-tree bpduguard interface configuration command to override the setting of

the spanning-tree portfast bpduguard default global configuration command.

This example shows how to enable the BPDU guard feature on a port:

Switch(config)# interface gigabitethernet2/0/1

Switch(config-if)# spanning-tree bpduguard enable

You can verify your setting by entering the show running-config privileged EXEC command.

manuals search engine

Modification

This command was introduced.

Catalyst 3750-X and 3560-X Switch Command Reference

spanning-tree bpduguard

Catalyst 3750-x