Spanning-Tree Bpdu-Guard - Edge-Core ECS3510-26P Management Manual

26-port fast ethernet layer 2 switch

Hide thumbs Also See for ECS3510-26P:

Table of Contents

This command filters all Bridge Protocol Data Units (BPDUs) that would

otherwise be transmitted on an interface to save CPU processing time.

This function is designed to work in conjunction with edge ports which

should only connect end stations to the switch, and therefore do not

need to process BPDUs. However, note that if a trunking port connected

to another switch or bridging device is mistakenly configured as an

edge port, and BPDU filtering is enabled on this port, this might cause a

loop in the spanning tree.

Before enabling BPDU Filter, the interface must first be configured as an

edge port with the

Console(config)#interface ethernet 1/5

Console(config-if)#spanning-tree edge-port

Console(config-if)#spanning-tree bpdu-filter

Console(config-if)#

spanning-tree edge-port (809)

This command shuts down an edge port (i.e., an interface set for fast

spanning-tree

forwarding) if it receives a BPDU. Use the no form to disable this feature.

[no] spanning-tree bpdu-guard

Interface Configuration (Ethernet, Port Channel)

An edge port should only be connected to end nodes which do not

generate BPDUs. If a BPDU is received on an edge port, this indicates

an invalid network configuration, or that the switch may be under

attack by a hacker. If an interface is shut down by BPDU Guard, it must

be manually re-enabled using the

Before enabling BPDU Guard, the interface must be configured as an

edge port with the

the edge port attribute is disabled on an interface, BPDU Guard will also

be disabled on that interface.

spanning-tree edge-port

spanning-tree edge-port

| Spanning Tree Commands

no spanning-tree spanning-disabled

command. Also note that if

Show Quick Links

Table of Contents