Spanning-Tree Portfast Bpdu-Guard - Allied Telesis SwitchBlade x908 Series Software Reference Manual

Spanning Tree Commands

spanning-tree portfast bpdu-guard

This command sets the portfast feature and applies a BPDU guard to the port. A port with the
portfast feature enabled will block all traffic (BPDUs and user data), if it starts receiving BPDUs.
Use the no parameter with this command to disable the BPDU Guard feature on a switch.
Syntax
spanning-tree portfast bpdu-guard
(Configuration
no spanning-tree portfast bpdu-guard
Mode)
Syntax spanning-tree portfast bpdu-guard {default|disable|enable}
(Interface Mode)
no spanning-tree portfast bpdu-guard
Parameter
portfast
bpdu-guard
Global Configuration mode or Interface mode
Mode
BPDU Guard is a port-security feature that changes how a portfast-enabled port behaves if it
Usage
receives a BPDU. When bpdu-guard is set, then the port shuts down if it receives a BPDU. It
does not process the BPDU as it is considered suspicious. When bpdu-guard is not set, then
the port will negotiate spanning-tree with the device sending the BPDUs. By default, bpdu-
guard is not enabled on a port.
You can configure a port disabled by the bpdu-guard to re-enable itself after a specific time
interval. This interval is set with the
page
re-enable the port by using the no shutdown command.
Use the
configurations for the BPDU Guard feature. It shows both the administratively configured and
currently running values of bpdu-guard.
Example
awplus(config-if)#
spanning-tree edgeport (RSTP and MSTP)
Related Commands
19.42
Description
A port that behaves as an edge-port. Note that an edge port should never
receive BPDUs. If a port does receive a BPDU then it will cease to act as an
edge port.
A portfast port that has bpdu-guard turned on will enter the STP blocking
state if it receives a BPDU. This port type has one of the following
parameters:
default Takes the setting that has been configured for the whole switch,
i.e. the setting made from the Global configuration mode.
disable Turns off BPDU guard.
Turns on BPDU guard.
enable
19.27. If you do not use the errdisable-timeout feature, then you will need to manually
show spanning-tree command on page 19.12
awplus# configure terminal
awplus(config)# spanning-tree portfast bpdu-guard
awplus# configure terminal
awplus(config)# interface port1.1.2
spanning-tree portfast bpdu-guard enable
Software Reference for SwitchBlade® x908, x900 and x600 Series Switches
TM
AlliedWare Plus Operating System - Software Version 5.3.1
spanning-tree errdisable-timeout interval command on
to display the switch and port
C613-50007-01 REV B