From: Narbik Kocharians (narbikk@gmail.com)
Date: Wed Nov 28 2007 - 02:16:49 ART
If the command was configured at the global level, it will only effect the
ports that are configured as portfast, i don't see a problem.
On 11/27/07, keith tokash <ktokash@hotmail.com> wrote:
>
> "sh int status"
>
> One command to rule them all.
>
> With a few exceptions, secrecy is deeply incompatible with democracy and
> with science.
> --Carl Sagan
>
> > Date: Tue, 27 Nov 2007 19:38:03 -0800
> > From: darbyweaver@yahoo.com
> > Subject: Re: bpdugaurd
> > To: narbikk@gmail.com; M_A_Jones@dell.com
> > CC: mounir.ccieisa@gmail.com; asim.mz@gmail.com; ccielab@groupstudy.com
> >
> > Now...
> >
> > Imagine that this global command was turned on in your
> > lab at the outset...
> >
> > Hmmm....
> >
> > A little havoc to the unwary? Not much to a seasoned
> > careful eye, but maybe to those not so careful,
> > perhaps?
> >
> >
> > --- Narbik Kocharians <narbikk@gmail.com> wrote:
> >
> > > At the global level you can enable BPDUguard by
> > > using the "Spanning-tree
> > > portfast bpduguard default", this will shut down the
> > > portfast enabled ports
> > > that receive BPDUs.
> > >
> > > This could also be done at the interface level, if
> > > its enabled at the
> > > interface level then, you don't need to enable
> > > portfast at the interface
> > > level. Once again the interface will transition into
> > > err-disable mode if
> > > that given port receives BPDUs.
> > >
> > > On 11/27/07, M_A_Jones@dell.com <M_A_Jones@dell.com>
> > > wrote:
> > > >
> > > > If you enable BPDU Guard on every interface, isnt
> > > that Global???
> > > >
> > > > :)
> > > >
> > > >
> > > > Michael Jones
> > > > Network Engineer
> > > > Global Network Operations
> > > > Dell Inc. | Information Technology
> > > > W. 512.723.3268 | C. 512.966.6908
> > > >
> > > > -----Original Message-----
> > > > From: nobody@groupstudy.com
> > > [mailto:nobody@groupstudy.com] On Behalf Of
> > > > Mounir Mohamed
> > > > Sent: Tuesday, November 27, 2007 12:03 PM
> > > > To: Asim Zafar
> > > > Cc: Cisco certification
> > > > Subject: Re: bpdugaurd
> > > >
> > > > Dear Asim,
> > > >
> > > > BPDU can not be enabled globally, but you can
> > > enable BPDUGUARD with
> > > > portfast, in this case the command only effect all
> > > ports has portfast
> > > > enabled.
> > > >
> > > > You can enable portfast per interface or globally
> > > by use
> > > > SW1(config)#spanning-tree portfast default
> > > >
> > > > If you asked to enable BPDUGUARD on all
> > > access-ports you can do it with
> > > > the below tow commands
> > > >
> > > > SW1(config)#spanning-tree portfast default
> > > SW1(config)#spanning-tree
> > > > portfast bpduguard default
> > > >
> > > > You can verify it by:
> > > >
> > > > SW1#show spanning-tree interface f0/1 detail | inc
> > > Bpdu|portfast
> > > > The port is in the portfast mode by default
> > > > Bpdu guard is enabled by default
> > > >
> > > > Best Regards,
> > > > Mounir Mohamed
> > > >
> > > > On Nov 27, 2007 2:03 PM, Asim Zafar
> > > <asim.mz@gmail.com> wrote:
> > > >
> > > > > Hi Techs,
> > > > >
> > > > >
> > > > > If I implement BPDUGAURD on global config mode
> > > will it be implemented
> > > > > on all access ports or it will be implemented on
> > > all ports regardless
> > > > > access, trunk on the switch, if this is true
> > > then will we have to
> > > > > configure them separately on all ports.
> > > > >
> > > > >
> > > > > --
> > > > > Thanks & Regards,
> > > > >
> > > > > Asim Zafar
> > > > >
> > > > >
> > >
> > ______________________________________________________________________
> > > > > _ Subscription information may be found at:
> > > > > http://www.groupstudy.com/list/CCIELab.html
> > > > >
> > > >
> > > >
> > > >
> > > > --
> > > > Best Regards,
> > > > Mounir Mohamed
> > > >
> > > >
> > >
> > _______________________________________________________________________
> > > > Subscription information may be found at:
> > > > http://www.groupstudy.com/list/CCIELab.html
> > > >
> > > >
> > >
> > _______________________________________________________________________
> > > > Subscription information may be found at:
> > > > http://www.groupstudy.com/list/CCIELab.html
> > > >
> > >
> > >
> > >
> > > --
> > > Narbik Kocharians
> > > CCIE# 12410 (R&S, SP, Security)
> > > CCSI# 30832
> > > www.Net-WorkBooks.com <http://www.net-workbooks.com/>
> > >
> > >
> > _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
> ------------------------------
> You keep typing, we keep giving. Download Messenger and join the i'm
> Initiative now. Join in!<http://im.live.com/messenger/im/home/?source=CRM_WL_joinnow>
>
-- Narbik Kocharians CCIE# 12410 (R&S, SP, Security) CCSI# 30832 www.Net-WorkBooks.com
This archive was generated by hypermail 2.1.4 : Sat Dec 01 2007 - 06:37:31 ART