Configuring STP Extensions Using Cisco NX-OS
BPDU Guard
This figure shows the network with Bridge Assurance enabled, and the STP topology progressing normally
with bidirectional BPDUs issuing from every STP network port.
Figure 19: Network STP Topology Running Bridge Assurance
This figure shows how the potential network problem does not happen when you have Bridge Assurance
enabled on your network.
Figure 20: Network Problem Averted with Bridge Assurance Enabled
BPDU Guard
BPDU Guard prevents a port from receiving BPDUs. You can configure BPDU Guard at the global or interface
level.
When you configure BPDU Guard globally, it is effective only on operational spanning tree edge ports. In a
valid configuration, Layer 2 LAN edge interfaces do not receive BPDUs. A BPDU that is received by an edge
Cisco Nexus 7000 Series NX-OS Layer 2 Switching Configuration Guide, Release 5.x
180