Enabling Etherchannel Guard - Cisco 3845 - Security Bundle Router Software Manual

Configuring Optional Spanning-Tree Features
You can also use the spanning-tree bpdufilter enable interface configuration command to enable
BPDU filtering on any STP port without also enabling the Port Fast feature. This command prevents the
STP port from sending or receiving BPDUs.
Caution Enabling BPDU filtering on an STP port is the same as disabling spanning tree on it and can result in
spanning-tree loops.
You can enable the BPDU filtering feature if your switch is running PVST+, rapid PVST+, or MSTP.
Beginning in privileged EXEC mode, follow these steps to globally enable the BPDU filtering feature.
This procedure is optional.
Command
Step 1
configure terminal
Step 2
spanning-tree portfast bpdufilter default
Step 3
interface interface-id
Step 4 spanning-tree portfast
Step 5 end
Step 6 show running-config
Step 7 copy running-config startup-config
To disable BPDU filtering, use the no spanning-tree portfast bpdufilter default global configuration
command.
You can override the setting of the no spanning-tree portfast bpdufilter default global configuration
command by using the spanning-tree bpdufilter enable interface configuration command on an STP
port.

Enabling EtherChannel Guard

You can enable EtherChannel guard to detect an EtherChannel misconfiguration if your switch is
running PVST+, rapid PVST+, or MSTP.
Beginning in privileged EXEC mode, follow these steps to enable EtherChannel guard. This procedure
is optional.
Command
Step 1 configure terminal
Step 2 spanning-tree etherchannel guard misconfig
Step 3 end
Cisco ME 3800X and 3600X Switch Software Configuration Guide
15-8
Chapter 15
Purpose
Enter global configuration mode.
Globally enable BPDU filtering. (By default, BPDU filtering is
disabled.)
Globally enabling BPDU filtering enables it only on STP
Note
ports; the command has no effect on UNIs or ENIs on
which STP is not enabled.
Specify the interface connected to an end station, and enter
interface configuration mode.
Enable the Port Fast feature.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Enable EtherChannel guard.
Return to privileged EXEC mode.
Configuring Optional Spanning-Tree Features
OL-23400-01