Enterasys Networks Enterasys D2 D2G124-12P - Manual (Page 217)

set spantree spanguard
D-Series CLI Reference 6-25
Defaults
None.
Mode
Switch command, read‐only.
Example
This example shows how to display the SpanGuard function status:
D2(su)->show spantree spanguard
Spanguard is disabled
set spantree spanguard
Use this command to enable or disable the Spanning Tree SpanGuard function.
Syntax
set spantree spanguard {enable | disable}
Parameters
Defaults
None.
Mode
Switch command, read‐write.
Usage
SpanGuard is designed to disable, or lock out an “edge” port when an unexpected BPDU is
received. The port can be configured to be re‐enabled after a set time period, or only after manual
intervention.
A port can be defined as an edge (user) port using the set spantree adminedge command,
described in “
set spantree adminedge ” on page 6‐37. A port designated as an edge port is
expected to be connected to a workstation or other end‐user type of device, and not to another
switch in the network. When Spanguard is enabled, if a non‐loopback BPDU is received on an
edge port, the Spanning Tree state of that port will be changed to “blocking” and will no longer
forward traffic. The port will remain disabled until the amount of time defined by set spantree
spanguardtimeout (“
set spantree spanguardtimeout ” on page 6‐26) has passed since the last seen
BPDU, the port is manually unlocked (set or clear spantree spanguardlock, “ clear / set spantree
spanguardlock ” on page 6‐28), the configuration of the port is changed so it is not longer an edge
port, or the SpanGuard function is disabled.
SpanGuard is enabled and disabled only on a global basis. By default, SpanGuard is disabled and
SpanGuard traps are enabled.
Example
This example shows how to enable the SpanGuard function:
D2(rw)->set spantree spanguard enable
enable | disable Enables or disables the SpanGuard function.