Hi ,
Wish U A HAPPY NEW YEAR.
BPDU guard is a feature that prevents a port from receiving BPDUs. This feature is typically used in a service provider environment where the administrator wants to prevent an access port from participating in the spanning tree. If the port still receives a BPDU, it is put in the ErrDisable state as a protective measure. This command has three states:
•spanning-tree bpduguard enable-This state unconditionally enables BPDU guard on the interface.
•spanning-tree bpduguard disable-This state unconditionally disables BPDU guard on the interface.
•no spanning-tree bpduguard-This state enables BPDU guard on the interface if it is in the operational PortFast state and if the spanning-tree portfast bpduguard default command is configured.
Examples
This example shows how to enable BPDU guard on this interface:
Switch(config-if)# spanning-tree bpduguard enable
Switch(config-if)#
spanning-tree portfast bpduguard default
To enable BPDU guard by default on all the PortFast ports, use the spanning-tree portfast bpduguard default command. To return to the default settings, use the no form of this command.
spanning-tree portfast bpduguard default
no spanning-tree portfast bpduguard default
Caution Be careful when using this command. You should use this command only with the interfaces that connect to the end stations; otherwise, an accidental topology loop could cause a data packet loop and disrupt the Catalyst 4500 series switch and network operation.
--------------------------------------------------------------------------------
BPDU guard disables a port if it receives a BPDU. BPDU guard is applied only on ports that are PortFast enabled and are in an operational PortFast state.
Examples
This example shows how to enable BPDU guard by default:
Switch(config)# spanning-tree portfast bpduguard default
Switch(config)#
Cheers ,
Satish
