Enabling Bpdu Filtering Globally - Cisco Nexus 6000 Series Configuration Manual

Configuring STP Extensions
Step 3
Step 4
This example shows how to explicitly enable BPDU Guard on the Ethernet edge port 1/4:
switch# configure terminal
switch (config)# interface ethernet 1/4
switch(config-if)# spanning-tree bpduguard enable
switch(config-if)# no spanning-tree bpduguard

Enabling BPDU Filtering Globally

You can enable BPDU Filtering globally by default on spanning tree edge ports.
If an edge port with BPDU Filtering enabled receives a BPDU, it loses its operation status and as edge port
and resumes the regular STP transitions. However, this port maintains it configuration as an edge port.
Be careful when using this command: using it incorrectly can cause bridging loops.
Caution
When enabled globally, BPDU Filtering is applied only on ports that are operational edge ports. Ports
Note
send a few BPDUs at linkup before they effectively filter outbound BPDUs. If a BPDU is received on an
edge port, it immediately loses its operational edge port status and BPDU Filtering is disabled.
Before You Begin
Ensure that STP is configured.
Ensure that you have configured some spanning tree edge ports.
Procedure
Step 1
Cisco Nexus 6000 Series NX-OS Layer 2 Switching Configuration Guide, Release 7.x
102
Command or Action
switch(config-if)# spanning-tree
bpduguard {enable | disable}
switch(config-if)# no
spanning-tree bpduguard
Command or Action
switch# configure terminal
Purpose
Enables or disables BPDU Guard for the specified spanning
tree edge interface. By default, BPDU Guard is disabled on
physical Ethernet interfaces.
(Optional)
Disables BPDU Guard on the interface.
Enables BPDU Guard on the interface if it is an
Note
operational edge port and if you enter the
spanning-tree port type edge bpduguard default
command.
Purpose
Enters global configuration mode.
Configuring STP Extensions