Spanning-Tree Bpduguard - Cisco Catalyst 3560-X Command Reference Manual

Chapter 2 Catalyst 3750-X and 3560-X Cisco IOS Commands

spanning-tree bpduguard

Syntax Description
Defaults
Command Modes
Command History
Usage Guidelines
Examples
OL-21522-02
Downloaded from www.Manualslib.com
Use the spanning-tree bpduguard interface configuration command on the switch stack or on a
standalone switch to put an interface in the error-disabled state when it receives a bridge protocol data
unit (BPDU). Use the no form of this command to return to the default setting.
spanning-tree bpduguard {disable | enable}
no spanning-tree bpduguard
disable Disable BPDU guard on the specified interface.
enable Enable BPDU guard on the specified interface.
BPDU guard is disabled.
Interface configuration
Release
12.2(53)SE2
The BPDU guard feature provides a secure response to invalid configurations because you must
manually put the interface back in service. Use the BPDU guard feature in a service-provider network
to prevent an interface from being included in the spanning-tree topology.
You can enable the BPDU guard feature when the switch is operating in the per-VLAN spanning-tree
plus (PVST+), rapid-PVST+, or the multiple spanning-tree (MST) mode.
You can globally enable BPDU guard on all Port Fast-enabled interfaces by using the spanning-tree
portfast bpduguard default global configuration command.
You can use the spanning-tree bpduguard interface configuration command to override the setting of
the spanning-tree portfast bpduguard default global configuration command.
This example shows how to enable the BPDU guard feature on a port:
Switch(config)# interface gigabitethernet2/0/1
Switch(config-if)# spanning-tree bpduguard enable
You can verify your setting by entering the show running-config privileged EXEC command.
manuals search engine
Modification
This command was introduced.
Catalyst 3750-X and 3560-X Switch Command Reference
spanning-tree bpduguard
2-801