Spanning-tree bpdu-guard, Spanning-tree port-bpdu-flooding – LevelOne FGL-2870 User Manual
Page 650

Command Line Interface
4-284
4
Related Commands
spanning-tree edge-port (4-281)
spanning-tree portfast (4-282)
spanning-tree bpdu-guard
This command shuts down an edge port (i.e., an interface set for fast forwarding) if it
receives a BPDU. Use the no form to disable this feature.
Syntax
[no] spanning-tree bpdu-guard
Default Setting
Disabled
Command Mode
Interface Configuration (Ethernet, Port Channel)
Command Usage
• An edge port should only be connected to end nodes which do not generate
BPDUs. If a BPDU is received on an edge port, this indicates an invalid
network configuration, or that the switch may be under attack by a hacker. If
an interface is shut down by BPDU Guard, it must be manually re-enabled
using the no spanning-tree spanning-disabled command.
• Before enabling BPDU Guard, the interface must be configured as an edge
port with the spanning-tree edge-port or spanning-tree portfast command.
Also note that if the edge port attribute is disabled on an interface, BPDU
Guard will also be disabled on that interface.
Example
Related Commands
spanning-tree edge-port (4-281)
spanning-tree portfast (4-282)
spanning-tree spanning-disabled (4-278)
spanning-tree port-bpdu-flooding
This command floods BPDUs to other ports when spanning tree is disabled globally
or disabled on a specific port. Use the no form to restore the default setting.
Syntax
[no] spanning-tree port-bpdu-flooding
Default Setting
Enabled
Console(config)#interface ethernet ethernet 1/5
Console(config-if)#spanning-tree edge-port
Console(config-if)#spanning-tree bpdu-guard
Console(config-if)#