beautypg.com

Enabling bpdu protection by port, Re-enabling ports disabled by bpdu guard, Displaying the bpdu guard status – Brocade FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide User Manual

Page 324

background image

Enabling BPDU protection by port

You enable STP BPDU guard on individual interfaces. The feature is disabled by default.

To enable STP BPDU guard on a specific port, enter a command such as the following.

device(config) interface ethe 2/1

device(config-if-e1000-2/1)#stp-bpdu-guard

Syntax: [no] stp-bpd-guard

The no parameter disables the BPDU guard on this interface.

You can also use the multiple interface command to enable this feature on multiple ports at once.

device(config)#interface ethernet 1/1 to 1/9

device(config-mif-1/1-1/9)#stp-bpdu-guard

device(config-mif-1/1-1/9)#

This will enable stp-bpdu-guard on ports 0/1/1 to 0/1/9

Re-enabling ports disabled by BPDU guard

When a BPDU Guard-enabled port is disabled by BPDU Guard, the Brocade device will place the port
in errdisable state and display a message on the console indicating that the port is errdisabled (refer
to

BPDU guard status example console messages

on page 325). In addition, the show interface

command output will indicate that the port is errdisabled.

device#show int e 2

Gigabit Ethernet2 is ERR-DISABLED (bpduguard), line protocol is down

To re-enable a port that is in errdisable state, you must first disable the port then re-enable it. Enter
commands such as the following.

device(config)#int e 2

device(config-if-e1000-2)#disable

device(config-if-e1000-2)#enable

If you attempt to enable an errdisabled port without first disabling it, the following error message will
appear on the console.

device(config-if-e1000-2)#enable

Port 2 is errdisabled, do disable first and then enable to enable it

Displaying the BPDU guard status

To display the BPDU guard state, enter the show running configuration or the show stp-bpdu-
guard
command.

For FastIron X Series devices, enter the stp-bpdu-guard command.

device#show stp-bpdu-guard

BPDU Guard Enabled on:

Interface Violation

Port 1 No

Port 2 No

Port 3 No

Port 4 No

Port 5 No

Port 6 No

Port 7 No

Enabling BPDU protection by port

324

FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide

53-1003086-04