CLI Guide

shutdown-on-
violation
(OPTIONAL) Enter the keywords shutdown-on-violation
to hardware disable an interface when a BPDU is received
and the port is disabled.
bpdufilter (OPTIONAL) Enter the keyword bpdufilter to stop
sending and receiving BPDUs on port fast enabled ports.
err-disable Enter the keywords err-disable to enable the port to be
put into the error-disable state (EDS) if an error condition
occurs.
vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range
is from 1 to 4094.
cost number Enter the keyword cost then the port cost value. The range
is from 1 to 200000.
Defaults:
• 10-Gigabit Ethernet interface = 2000.
• Port Channel interface with one 10 Gigabit Ethernet =
2000.
• Port Channel with two 10 Gigabit Ethernet = 1800.
• Port Channel with two 40 Mbps Ethernet = 600.
priority value Enter the keyword priority then the Port priority value in
increments of 16. The range is from 0 to 240. The default is
128.
rootguard Enter the keyword rootguard to enable root guard on a
PVST+ port or port-channel interface.
Defaults Not configured.
Command Modes INTERFACE
Supported Modes Full—Switch
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
The BPDU guard option prevents the port from participating in an active STP
topology in case a BPDU appears on a port unintentionally, or is misconfigured, or
is subject to a DOS attack. This option places the port into the Error Disable state if
a BPDU appears, and a message is logged so that the administrator can take
corrective action. When BPDU guard and BPDU filter is enabled on the port, then
BPDU filter takes the highest precedence.
1212
Per-VLAN Spanning Tree Plus (PVST+)