Related Topics
PortFast, on page 80
Restriction for Optional Spanning-Tree Features, on page 79
Enabling BPDU Guard
You can enable the BPDU guard feature if your switch is running PVST+, Rapid PVST+, or MSTP.
Configure PortFast only on ports that connect to end stations; otherwise, an accidental topology loop could
cause a data packet loop and disrupt switch and network operation.
Caution
This procedure is optional.
Beginning in privileged EXEC mode, follow these steps to enable BPDU guard on the switch.
SUMMARY STEPS
1.
configure terminal
2.
spanning-tree portfast bpduguard default
3.
interface interface-id
4.
spanning-tree portfast
5.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Globally enables BPDU guard.spanning-tree portfast bpduguard default
Step 2
Example:
Switch(config)# spanning-tree portfast bpduguard
default
By default, BPDU guard is disabled.
Specifies the interface connected to an end station,
and enters interface configuration mode.
interface interface-id
Example:
Switch(config)# interface gigabitethernet1/0/2
Step 3
Catalyst 2960-XR Switch Layer 2 Configuration Guide, Cisco IOS Release 15.0(2)EX1
92 OL-29424-01
Configuring Optional Spanning-Tree Features
Enabling BPDU Guard