Service Manual

bpduguard
Enter the keyword portfast to enable Portfast to move the interface into Forwarding
mode immediately after the root fails.
Enter the keyword bpduguard to disable the port when it receives a BPDU.
shutdown-on-
violation
(OPTIONAL) Enter the keywords shutdown-on-violation to hardware disable an
interface when a BPDU is received and the port is disabled.
bpdufilter (OPTIONAL) Enter the keyword bpdufilter to stop sending and receiving BPDUs on
port fast enabled ports.
err-disable Enter the keywords err-disable to enable the port to be put into the error-disable
state (EDS) if an error condition occurs.
vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094.
cost number Enter the keyword cost then the port cost value. The range is from 1 to 200000.
Defaults:
• 10-Gigabit Ethernet interface = 2000.
• 40-Gigabit Ethernet interface = 1400.
• Port Channel interface with one 10 Gigabit Ethernet = 2000.
• Port Channel with two 10 Gigabit Ethernet = 1800.
• Port Channel with two 40 Mbps Ethernet = 600.
priority value Enter the keyword priority then the Port priority value in increments of 16. The range
is from 0 to 240. The default is 128.
rootguard Enter the keyword rootguard to enable root guard on a PVST+ port or port-channel
interface.
Defaults Not configured.
Command Modes INTERFACE
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
The BPDU guard option prevents the port from participating in an active STP topology in case a BPDU appears on
a port unintentionally, or is misconfigured, or is subject to a DOS attack. This option places the port into the Error
Disable state if a BPDU appears, and a message is logged so that the administrator can take corrective action.
When BPDU guard and BPDU filter is enabled on the port, then BPDU filter takes the highest precedence.
NOTE: A port configured as an edge port, on a PVST switch, will immediately transition to the
forwarding state. Only ports connected to end-hosts should be configured as an edge port. Consider
an edge port similar to a port with a spanning-tree portfast enabled.
Example
Dell(conf-if-te-0/1)#spanning-tree pvst vlan 3 cost 18000
Dell(conf-if-te-0/1)#end
Dell(conf-if-te-0/1)#show config
!
interface TenGigabitEthernet 0/1
no ip address
switchport
spanning-tree pvst vlan 3 cost 18000
992 Per-VLAN Spanning Tree Plus (PVST+)