16-7
Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide
78-17058-01
Chapter16 Configuring Optiona l Spa nning-Tree Features Configuring Optional Spanning-Tree Features
Caution Configure Port Fast only on NNIs that connect to end stations; othe rwi se, an acc ide ntal topo logy l o op
could cause a data packet loop and disrupt switch and network operation.
You also can use the spanning-tree bpduguard enable interface configuration command to enable
BPDU guard on any NNI without also enabling the Port Fast featur e. W hen the inte rface receives a
BPDU, it is put in the error-disabled state.
You can enable the BPDU guard feature if your switch is running PVST+, rapid PVST+, or MSTP.
Beginning in privileged EXEC mode, follow these steps to globally en able the BPDU gua rd feature. This
procedure is optional.
To disable BPDU guard, use the no spanning-tree portfast bpduguard default global configuration
command.
You can override the setting of the no spanning-tre e portfast bpduguard default global configuration
command by using the spanning-tree bpduguard enable interface configuration command on an NNI.
Enabling BPDU Filtering
When you globally enable BPDU filtering on Port Fast-enabled NNIs, it prevents interfaces that are in
a Port Fast-operational state from sending or receiving BPDUs. The interfaces still send a few BPDUs
at link-up before the switch begins to filter outbound BPDUs. Y ou should globally en able BPDU filteri ng
on a switch so that hosts connected to these interfaces do not receive BPDUs. If a BPDU is received on
a Port Fast-enabled NNI, the interface loses its Port Fast-operational status, and BPDU filtering is
disabled.
Caution Configure Port Fast only on NNIs that connect to end stations; othe rwi se, an acc ide ntal topo logy l o op
could cause a data packet loop and disrupt switch and network operation.
Command Purpose
Step1 configure terminal Enter global configuration mode.
Step2 spanning-tree portfast bpduguard default Globally enable BPDU guard. (By default, BPDU guard is
disabled.)
Note Globally enabling BPDU guard enables it only on NNIs;
the command has no effect on UNIs.
Step3 interface interface-id Specify the interface connected to an end station, and enter
interface configuration mode. If the interface is not an NNI, you
must enter the port-type nni interface configuration command
before enabling Port Fast.
Step4 spanning-tree portfast Enable the Port Fast feature.
Step5 end Return to privileged EXEC mode.
Step6 show running-config Verify your entries.
Step7 copy running-config startup-config (Optional) Save your entries in the configuration file.