User Manual
218
Users Manual of XGS-6350-24X4C
BPDU guard feature puts the port in the error-disabled state. When this happens, the switch shuts down the
entire port on which the violation occurred.
To prevent the port from shutting down, you can use the errdisable detect cause bpduguard shutdown
vlan global configuration command to shut down just the offending VLAN on the port where the violation
occurred.
The BPDU guard feature provides a secure response to invalid configurations because you must manually
put the port back in service. Use the BPDU guard feature in a service-provider network to prevent an access
port from participating in the spanning tree.
Follow these steps to globally enable the BPDU guard feature:
command purpose
spanning-tree portfast bpduguard Globally enables bpdu guard feature. It is
valid to all interfaces.
no spanning-tree portfast bpduguard Globally disables bpdu guard feature.
Instruction:
Globally enabling port fast feature may result in broadcast storm. The BPDU Guard or BPDU Filter should be
configured for protection sake.
Follow these steps to enable the BPDU guard feature in interface configuration mode:
Command Purpose
spanning-tree bpduguard enable Enables bpdu guard feature on the
interface.
spanning-tree bpduguard disable Disables bpdu guard feature on the
interface. It has no effect on the global
configuration.
no spanning-tree bpduguard Disables bpdu guard feature on the
interface. It has no effect on the global
configuration.
20.1.2.4 Configuring BPDU Filter
When you globally enable BPDU filtering on Port Fast-enabled interfaces, it prevents interfaces that are in a
Port Fast-operational state from sending or receiving BPDUs. The interfaces still send a few BPDUs at link-up
before the switch begins to filter outbound BPDUs. You should globally enable BPDU filtering on a switch so
that hosts connected to these interfaces do not receive BPDUs. If a BPDU is received on a Port Fast-enabled
interface, the interface loses its Port Fast-operational status, and BPDU filtering is disabled.
Follow these steps to globally enable the BPDU filter feature.:
Command Purpose