Cisco Systems N3KC3048TP1GE Enabling BPDU Filtering Globally, edge bpdufilter default, Procedure

Configuring STP Extensions

Configuring STP Extensions

Command or Action Purpose

This example shows how to explicitly enable BPDU Guard on the Ethernet edge port 1/4:

switch# configure terminal

switch (config)# interface ethernet 1/4 switch(config-if)#spanning-tree bpduguard enable

switch(config-if)# no spanning-tree bpduguard

Enabling BPDU Filtering Globally

You can enable BPDU Filtering globally by default on spanning tree edge ports.

If an edge port with BPDU Filtering enabled receives a BPDU, it loses its operation status and as edge port and resumes the regular STP transitions. However, this port maintains it configuration as an edge port.

Caution Be careful when using this command: using it incorrectly can cause bridging loops.

Note When enabled globally, BPDU Filtering is applied only on ports that are operational edge ports. Ports send a few BPDUs at linkup before they effectively filter outbound BPDUs. If a BPDU is received on an edge port, it immediately loses its operational edge port status and BPDU Filtering is disabled.

Before You Begin

Ensure that STP is configured.

Ensure that you have configured some spanning tree edge ports.

Procedure

	Command or Action	Purpose
Step 1	switch# configure terminal	Enters configuration mode.
Step 2	switch(config)# spanning-tree port type	Enables BPDU Filtering by default on all
	edge bpdufilter default	operational spanning tree edge ports. Global BPDU
		Filtering is disabled by default.

This example shows how to enable BPDU Filtering on all operational spanning tree edge ports:

switch# configure terminal

switch(config)# spanning-tree port type edge bpdufilter default

	Cisco Nexus 3000 NX-OS Layer 2 Switching Configuration Guide, Release 5.0(3)U3(1)
122	OL-26590-01