Enabling Bpdu Filtering Globally - Cisco nexus 5000 series Configuration Manual

Configuring STP Extensions
• no spanning-tree bpduguard—Enables BPDU Guard on the interface if it is an operational edge port
Before You Begin
Ensure that STP is configured.
SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# interface type slot/port
3. switch(config-if)# spanning-tree bpduguard {enable | disable}
4. (Optional) switch(config-if)# no spanning-tree bpduguard
DETAILED STEPS
Command or Action
Step 1 switch# configure terminal
Step 2 switch(config)# interface type slot/port
Step 3 switch(config-if)# spanning-tree bpduguard
{enable | disable}
Step 4
switch(config-if)# no spanning-tree
bpduguard
This example shows how to explicitly enable BPDU Guard on the Ethernet edge port 1/4:
switch# configure terminal
switch (config)# interface ethernet 1/4
switch(config-if)# spanning-tree bpduguard enable
switch(config-if)# no spanning-tree bpduguard

Enabling BPDU Filtering Globally

You can enable BPDU Filtering globally by default on spanning tree edge ports.
If an edge port with BPDU Filtering enabled receives a BPDU, it loses its operation status and as edge port
and resumes the regular STP transitions. However, this port maintains it configuration as an edge port.
Cisco Nexus 5000 Series NX-OS Layer 2 Switching Configuration Guide, Release 5.1(3)N1(1)
224
and if the spanning-tree port type edge bpduguard default command is configured.
Purpose
Enters global configuration mode.
Specifies the interface to configure, and enters the interface
configuration mode.
Enables or disables BPDU Guard for the specified spanning tree edge
interface. By default, BPDU Guard is disabled on physical Ethernet
interfaces.
(Optional)
Disables BPDU Guard on the interface.
Note Enables BPDU Guard on the interface if it is an operational
edge port and if you enter the spanning-tree port type edge
bpduguard default command.
Configuring STP Extensions
OL-25842-01