RE: Can I enable bpduguard without enabling portfast, and how

From: Geert Nijs (Geert.Nijs@simac.be)
Date: Tue Jul 08 2008 - 08:38:18 ART


BPDU Guard will still send out BPDUs. I am 98% certain.
It will just blocks the port if it received BPDUs

You need to add BPDU filter together with BPDUGaurd to really 'eliminate' BPDU's if you want this. Be carefull, with BPDU filter you can create SPT loops because
you basically disable SPT on that port.

regards,
Geert
CCIE 13729

________________________________________
From: nobody@groupstudy.com [nobody@groupstudy.com] On Behalf Of CCIE3000 [ccie3000@googlemail.com]
Sent: 08 July 2008 11:37
To: ccie
Cc: ccielab@groupstudy.com
Subject: Re: Can I enable bpduguard without enabling portfast, and how that will work.

Hi Amin,

At the interface level, you enable BPDU guard on any interface by using the
*spanning-tree bpduguard enable* interface configuration command without
also enabling the Port Fast feature. When the interface receives a BPDU, it
is put in the error-disabled state.

I "think" that with bpduguard it doesn't send BPDU's but I'm not 100%. I
don't have a lab to try things with a that mo, use debug spanningtree events
I think

With BPDUFILTER it sends a few at the very beginning and then stops.

Either way with GUARD it's going to error disable the interface if it
receives a BPDU.

On Tue, Jul 8, 2008 at 10:51 AM, ccie <ccie@just-horizon.com> wrote:

> Hi Experts,
>
> Can I enable bpduguard without enabling portfast, and how that will work.
>
> Regards,
>
> Amin
>
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Mon Aug 04 2008 - 06:11:54 ART