From: Ahmed Shams (ahmedshamz@gmail.com)
Date: Thu Mar 02 2006 - 08:04:10 GMT-3
http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/12225sec/3550scg/sw
stpopt.htm#wp1051443
The link says:
"The BPDU guard feature can be globally enabled on the switch or can be
enabled per interface, but the feature operates with some differences.
"At the global level, you can enable BPDU guard on Port Fast-enabled ports
by using the *spanning-tree portfast bpduguard default* global configuration
command. Spanning tree shuts down ports that are in a Port Fast-operational
state. In a valid configuration, Port Fast-enabled ports do not receive
BPDUs. Receiving a BPDU on a Port Fast-enabled port signals an invalid
configuration, such as the connection of an unauthorized device, and the
BPDU guard feature puts the port in the error-disabled state.
At the interface level, you can enable BPDU guard on any port by using
the *spanning-tree
bpduguard enable* interface configuration command without also enabling the
Port Fast feature. When the port receives a BPDU, it is put in the
error-disabled state.
You can enable the BPDU guard feature for the entire switch or for an
interface."
HTH
Shams
On 3/2/06, Evgeniy Voloshin <e.voloshin@equant.ru> wrote:
>
> Hi group,
>
> how I can configure bpduguard on some switch port, if I cannot use
> "spanning-tree bpduguard" on intreface?
>
> ---
> Yev.
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Apr 01 2006 - 10:07:37 GMT-3