RE: bpdugaurd

From: keith tokash (ktokash@hotmail.com)
Date: Wed Nov 28 2007 - 02:03:44 ART


"sh int status"

One command to rule them all.

With a few exceptions, secrecy is deeply incompatible with democracy and with
science.
        --Carl Sagan

> Date: Tue, 27 Nov 2007 19:38:03 -0800
> From: darbyweaver@yahoo.com
> Subject: Re: bpdugaurd
> To: narbikk@gmail.com; M_A_Jones@dell.com
> CC: mounir.ccieisa@gmail.com; asim.mz@gmail.com; ccielab@groupstudy.com
>
> Now...
>
> Imagine that this global command was turned on in your
> lab at the outset...
>
> Hmmm....
>
> A little havoc to the unwary? Not much to a seasoned
> careful eye, but maybe to those not so careful,
> perhaps?
>
>
> --- Narbik Kocharians <narbikk@gmail.com> wrote:
>
> > At the global level you can enable BPDUguard by
> > using the "Spanning-tree
> > portfast bpduguard default", this will shut down the
> > portfast enabled ports
> > that receive BPDUs.
> >
> > This could also be done at the interface level, if
> > its enabled at the
> > interface level then, you don't need to enable
> > portfast at the interface
> > level. Once again the interface will transition into
> > err-disable mode if
> > that given port receives BPDUs.
> >
> > On 11/27/07, M_A_Jones@dell.com <M_A_Jones@dell.com>
> > wrote:
> > >
> > > If you enable BPDU Guard on every interface, isnt
> > that Global???
> > >
> > > :)
> > >
> > >
> > > Michael Jones
> > > Network Engineer
> > > Global Network Operations
> > > Dell Inc. | Information Technology
> > > W. 512.723.3268 | C. 512.966.6908
> > >
> > > -----Original Message-----
> > > From: nobody@groupstudy.com
> > [mailto:nobody@groupstudy.com] On Behalf Of
> > > Mounir Mohamed
> > > Sent: Tuesday, November 27, 2007 12:03 PM
> > > To: Asim Zafar
> > > Cc: Cisco certification
> > > Subject: Re: bpdugaurd
> > >
> > > Dear Asim,
> > >
> > > BPDU can not be enabled globally, but you can
> > enable BPDUGUARD with
> > > portfast, in this case the command only effect all
> > ports has portfast
> > > enabled.
> > >
> > > You can enable portfast per interface or globally
> > by use
> > > SW1(config)#spanning-tree portfast default
> > >
> > > If you asked to enable BPDUGUARD on all
> > access-ports you can do it with
> > > the below tow commands
> > >
> > > SW1(config)#spanning-tree portfast default
> > SW1(config)#spanning-tree
> > > portfast bpduguard default
> > >
> > > You can verify it by:
> > >
> > > SW1#show spanning-tree interface f0/1 detail | inc
> > Bpdu|portfast
> > > The port is in the portfast mode by default
> > > Bpdu guard is enabled by default
> > >
> > > Best Regards,
> > > Mounir Mohamed
> > >
> > > On Nov 27, 2007 2:03 PM, Asim Zafar
> > <asim.mz@gmail.com> wrote:
> > >
> > > > Hi Techs,
> > > >
> > > >
> > > > If I implement BPDUGAURD on global config mode
> > will it be implemented
> > > > on all access ports or it will be implemented on
> > all ports regardless
> > > > access, trunk on the switch, if this is true
> > then will we have to
> > > > configure them separately on all ports.
> > > >
> > > >
> > > > --
> > > > Thanks & Regards,
> > > >
> > > > Asim Zafar
> > > >
> > > >
> >
> ______________________________________________________________________
> > > > _ Subscription information may be found at:
> > > > http://www.groupstudy.com/list/CCIELab.html
> > > >
> > >
> > >
> > >
> > > --
> > > Best Regards,
> > > Mounir Mohamed
> > >
> > >
> >
> _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> > >
> > >
> >
> _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> > >
> >
> >
> >
> > --
> > Narbik Kocharians
> > CCIE# 12410 (R&S, SP, Security)
> > CCSI# 30832
> > www.Net-WorkBooks.com
> >
> >
> _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sat Dec 01 2007 - 06:37:31 ART