Enabling Bpdu Filtering - Cisco 2950G 24 - Catalyst Switch Software Configuration Manual

Configuring Optional Spanning-Tree Features
Command
Step 6 show running-config
Step 7
copy running-config startup-config
To disable BPDU guard, use the no spanning-tree portfast bpduguard default global configuration
command.
You can override the setting of the no spanning-tree portfast bpduguard default global configuration
command by using the spanning-tree bpduguard enable interface configuration command.

Enabling BPDU Filtering

When you globally enable BPDU filtering on Port Fast-enabled ports, it prevents ports that are in a Port
Fast-operational state from sending or receiving BPDUs. The ports still send a few BPDUs at link-up
before the switch begins to filter outbound BPDUs. You should globally enable BPDU filtering on a
switch so that hosts connected to these ports do not receive BPDUs. If a BPDU is received on a Port
Fast-enabled port, the port loses its Port Fast-operational status, and BPDU filtering is disabled.
Configure Port Fast only on ports that connect to end stations; otherwise, an accidental topology loop
Caution
could cause a data packet loop and disrupt switch and network operation.
You can also use the spanning-tree bpdufilter enable interface configuration command to enable
BPDU filtering on any port without also enabling the Port Fast feature. This command prevents the port
from sending or receiving BPDUs.
Caution Enabling BPDU filtering on an interface is the same as disabling spanning tree on it and can result in
spanning-tree loops.
You can enable the BPDU filtering feature if your switch is running PVST or MSTP. The MSTP is
available only if you have the EI installed on your switch.
Beginning in privileged EXEC mode, follow these steps to globally enable the BPDU filtering feature:
Command
Step 1 configure terminal
Step 2
spanning-tree portfast bpdufilter default
Step 3 interface interface-id
Step 4 spanning-tree portfast
Step 5
end
Step 6
show running-config
Step 7 copy running-config startup-config
Catalyst 2950 Desktop Switch Software Configuration Guide
13-16
Chapter 13
Purpose
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Globally enable BPDU filtering.
By default, BPDU filtering is disabled.
Enter interface configuration mode, and specify the interface
connected to an end station.
Enable the Port Fast feature.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Configuring Optional Spanning-Tree Features
78-14982-01