Table of Contents
Advertisement
Configuring Spanning Tree
Step 8
spanning-tree bpduflood
(Optional) Enable BPDU Forward. This function only takes effect when the spanning tree
function is disabled globally. By default, it is enabled.
With BPDU forward enabled, the port can still forward spanning tree BPDUs when the spanning
tree function is disabled.
Step 9
show spanning-tree interface-security [ fastEthernet port | gigabitEthernet port | ten-
gigabitEthernet port | port-channel port-channel-id ] [ bpdufilter | bpduguard | bpduflood | loop
| root | tc ]
(Optional) View the protect inforamtion of ports.
port:
lagid:
Step 10
end
Return to privileged EXEC mode.
Step 11
copy running-config startup-config
Save the settings in the configuration file.
This example shows how to enable Loop Protect, Root Protect, BPDU Filter and BPDU
Protect functions on port 1/0/3:
Switch#configure
Switch(config)#interface gigabitEthernet 1/0/3
Switch(config-if)#spanning-tree guard loop
Switch(config-if)#spanning-tree guard root
Switch(config-if)#spanning-tree bpdufilter
Switch(config-if)#spanning-tree bpduguard
Switch(config-if)#show spanning-tree interface-security gigabitEthernet 1/0/3
Interface BPDU-Filter BPDU-Guard Loop-Protect Root-Protect TC-Protect BPDU-Flood
----------
-----------
Gi1/0/3
Enable
Switch(config-if)#end
Switch#copy running-config startup-config
Specify the port number.
Specify the ID of the LAG.
-----------
Enable
------------
------------
Enable
Enable
STP Security Configurations
---------
---------
Disable
Enable
Configuration Guide
343
Advertisement
Table of Contents
