Enabling Bpdu Filtering - Cisco ME 3400 Software Configuration Manual

Configuring Optional Spanning-Tree Features
Command
Step 3
interface interface-id
Step 4 spanning-tree portfast
Step 5 end
Step 6
show running-config
Step 7 copy running-config startup-config
To disable BPDU guard, use the no spanning-tree portfast bpduguard default global configuration
command.
You can override the setting of the no spanning-tree portfast bpduguard default global configuration
command by using the spanning-tree bpduguard enable interface configuration command on an STP
port.

Enabling BPDU Filtering

When you globally enable BPDU filtering on Port Fast-enabled STP ports, it prevents interfaces that are
in a Port Fast-operational state from sending or receiving BPDUs. The interfaces still send a few BPDUs
at link-up before the switch begins to filter outbound BPDUs. You should globally enable BPDU filtering
on a switch so that hosts connected to these interfaces do not receive BPDUs. If a BPDU is received on
a Port Fast-enabled STP port, the interface loses its Port Fast-operational status, and BPDU filtering is
disabled.
Configure Port Fast only on STP ports that connect to end stations; otherwise, an accidental topology
Caution
loop could cause a data packet loop and disrupt switch and network operation.
You can also use the spanning-tree bpdufilter enable interface configuration command to enable
BPDU filtering on any STP port without also enabling the Port Fast feature. This command prevents the
STP port from sending or receiving BPDUs.
Caution Enabling BPDU filtering on an STP port is the same as disabling spanning tree on it and can result in
spanning-tree loops.
You can enable the BPDU filtering feature if your switch is running PVST+, rapid PVST+, or MSTP.
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
16-8
Chapter 16
Purpose
Specify the interface connected to an end station, and enter
interface configuration mode.
If the interface is a UNI, before you enable Port Fast, you must
change the port type to NNI or ENI to enable STP:
Enter the port-type nni interface configuration command to
•
change the port to an NNI with STP enabled by default.
Or enter the port-type eni and spanning-tree interface
•
configuration commands to configure the port as an ENI STP
port.
Enable the Port Fast feature.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Configuring Optional Spanning-Tree Features
OL-9639-07