Enabling Bpdu Guard - Cisco 6500 Series Software Configuration Manual

Chapter 16 Configuring Optional STP Features
To enable PortFast BPDU filtering on a nontrunking port, perform this task:
Command
Step 1
Router(config)# interface fastEthernet 4/4
Step 2
Router(config-if)# spanning-tree bpdufilter
enable
Step 3
Router# show spanning-tree interface
fastEthernet 4/4
This example shows how to enable PortFast BPDU filtering on a nontrunking port:
Router(config)# interface fastEthernet 4/4
Router(config-if)# spanning-tree bpdufilter enable
Router(config-if)# ^Z
Router# show spanning-tree interface fastEthernet 4/4
Vlan
---------------- ---- --- --------- -------- --------------------------------
VLAN0010
Router# show spanning-tree interface fastEthernet 4/4 detail
Router# show spanning-tree interface fastEthernet 4/4 detail
Port 196 (FastEthernet4/4) of VLAN0010 is forwarding
Port path cost 1000, Port priority 160, Port Identifier 160.196.
Designated root has priority 32768, address 00d0.00b8.140a
Designated bridge has priority 32768, address 00d0.00b8.140a
Designated port id is 160.196, designated path cost 0
Timers:message age 0, forward delay 0, hold 0
Number of transitions to forwarding state:1
The port is in the portfast mode by portfast trunk configuration
Link type is point-to-point by default
Bpdu filter is enabled
BPDU:sent 0, received 0
Router#

Enabling BPDU Guard

To enable BPDU Guard globally, perform this task:
Command
Step 1
Router(config)# spanning-tree portfast bpduguard
default
Router(config)# no spanning-tree portfast
bpduguard default
Step 2
Router(config)# end
Step 3
Router# show spanning-tree summary totals
This example shows how to enable BPDU Guard:
Router# configure terminal
Router(config)# spanning-tree portfast bpduguard
Router(config)# end
Router#
78-14099-04
Purpose
Selects the interface to configure.
Enables BPDU filtering.
Verifies the configuration.
Role Sts Cost Prio.Nbr Status
Desg FWD 1000 160.196
Purpose
Enables BPDU Guard globally.
Disables BPDU Guard globally.
Exits configuration mode.
Verifies the configuration.
Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide—Release 12.1 E
Edge P2p
Enabling BPDU Guard
16-11