Enabling Etherchannel Guard - Cisco ME 3400G-2CS - Ethernet Access Switch Software Configuration Manual

Configuring Optional Spanning-Tree Features
You can also use the spanning-tree bpdufilter enable interface configuration command to enable
BPDU filtering on any NNI without also enabling the Port Fast feature. This command prevents the NNI
from sending or receiving BPDUs.
Enabling BPDU filtering on an NNI is the same as disabling spanning tree on it and can result in
Caution
spanning-tree loops.
You can enable the BPDU filtering feature if your switch is running PVST+, rapid PVST+, or MSTP.
Beginning in privileged EXEC mode, follow these steps to globally enable the BPDU filtering feature.
This procedure is optional.
Command
Step 1
configure terminal
Step 2 spanning-tree portfast bpdufilter default
Step 3 interface interface-id
Step 4 spanning-tree portfast
Step 5
end
Step 6
show running-config
Step 7
copy running-config startup-config
To disable BPDU filtering, use the no spanning-tree portfast bpdufilter default global configuration
command.
You can override the setting of the no spanning-tree portfast bpdufilter default global configuration
command by using the spanning-tree bpdufilter enable interface configuration command on an NNI.

Enabling EtherChannel Guard

You can enable EtherChannel guard to detect an EtherChannel misconfiguration if your switch is
running PVST+, rapid PVST+, or MSTP.
Beginning in privileged EXEC mode, follow these steps to enable EtherChannel guard. This procedure
is optional.
Command
Step 1
configure terminal
Step 2 spanning-tree etherchannel guard misconfig
Step 3
end
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
16-8
Chapter 16
Purpose
Enter global configuration mode.
Globally enable BPDU filtering. (By default, BPDU filtering is
disabled.)
Globally enabling BPDU filtering enables it only on
Note
NNIs; the command has no effect on UNIs.
Specify the interface connected to an end station, and enter
interface configuration mode. If the interface is not an NNI, you
must enter the port-type nni interface configuration command
before enabling Port Fast.
Enable the Port Fast feature.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Enable EtherChannel guard.
Return to privileged EXEC mode.
Configuring Optional Spanning-Tree Features
78-17058-01