Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

bpduguard to disable the port automatically

I have enabled bpduguard to disable the port automatically whenever host flap issue occurs. And have found BPDU Guard to be very effective. But it's not working in some times. Any ideas? Thanks in advance.

1 REPLY
Hall of Fame Super Silver

Re: bpduguard to disable the port automatically

Hello Arun,

spanning-tree bpduguard action is triggered by the reception of an STP BPDU on the port so it is a good tool to detect unauthorized switches carried by users in offices.

if you connect an hub (that doesn't speak STP) STP bdpuguard doesn't detect it.

the presence of an hub can be inferred from the following facts:

port duplex is half duplex

multiple MAC addresses are seen on the port.

for the second you can use port security that can put the port in errordisable if more then X MAC addresses are seen on the port.

Hope to help

Giuseppe

305
Views
0
Helpful
1
Replies
CreatePlease to create content