Restriction for Optional Spanning-Tree Features, on page 287
Enabling BPDU Guard
You can enable the BPDU guard feature if your switch is running PVST+, Rapid PVST+, or MSTP.
Configure PortFast edge only on ports that connect to end stations; otherwise, an accidental topology loop
could cause a data packet loop and disrupt switch and network operation.
Caution
This procedure is optional.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
spanning-tree portfast edge bpduguard default
4.
interface interface-id
5.
spanning-tree portfast edge
6.
end
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode. Enter your password
if prompted.
enable
Example:
Switch> enable
Step 1
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 2
Globally enables BPDU guard.spanning-tree portfast edge bpduguard default
Step 3
Example:
Switch(config)# spanning-tree portfast edge
bpduguard default
By default, BPDU guard is disabled.
Specifies the interface connected to an end station, and
enters interface configuration mode.
interface interface-id
Example:
Switch(config)# interface gigabitethernet1/0/2
Step 4
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
304
How to Configure Optional Spanning-Tree Features