Re: bpduguard

From: Frank (ocsic@web.de)
Date: Wed Jan 03 2007 - 10:39:47 ART


mike chambo schrieb:

Hi,

i would use bpdufilter, when you globally enabled portfast to put an
interface out of portfast state.
Bpdugard both, on the interface and globally level, puts it into error
disable state.
With bpdugard you can ,also without portfast, make sure, that the other
end is not sending BPDU's (connected to a bridge).

Frank

> Question:
> Enable Portfast on interfaces g1/0/12 thru g1/0/16.
> Make sure that the switch will shut down any of these interfaces if it receives a BPDU on one of them.
>
> Solution provided:
>
> int ran g1/0/12 - 16
> spanning-tree portfast
> spanning-tree bpduguard enable
>
> this seems logical but my reading or my confusion seems to lead me to believe that:
>
> if portfast is enabled on the interface, then you don't need to activate bpduguard on the same interface; enter spanning-tree portfast bpduguard default (a global command) instead.
>
> That is:
> globally enter:
> spanning-tree portfast bpduguard default
>
> and at the Interface level:
>
> Interface range g1/0/12 - 16
> spanning-tree portfast
>
> or simply enter:
>
> int ran g1/0/12 - 16
> spanning-tree bpduguard enable
>
> Michael Chambo
>
>
> Send instant messages to your online friends http://uk.messenger.yahoo.com
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Thu Feb 08 2007 - 23:46:55 ART