Jon:

Can you elaborate on point 1?

Victor

Victor

Portfast allows a port to transmission straight to forwarding ie. no listening/learning stages. But it does not actually disable STP on that port. Of course if the device connecting to a portfast port does create a loop then it is usually too late to stop it because you have gone straight to forwarding but i just wanted to emphasise that portfast does not disable STP as some people think.

Jon

Hey, Jon:

Yes, I know you are 100% correct. I just wanted to see what your perspective on this was.

In fact, because STP is running, even on a PortFast port, you really should enable BPDU guard on it to avoid the case in which some knucklehead plugs a switch into the port. Once the BPDU is received, the PortFast port will transition to errdisable.

Yep, I agree, BPDUGuard should be enabled on portfast ports as an extra safeguard.

And if you want to be really safe you should look at port security as well as BPDUGuard won't protect against hubs which don't send BPDUs.

But you know all this :-)

Jon

Jon, I really didnt need any information from you...I confess, I was just flirting....you British stud. LOL