Administrator Guide

Layer 2 Switching Commands 778
spanning-tree portfast bpdufilter default
The spanning-tree portfast bpdufilter default command disables the
transmission and reception of BPDUs on portfast enabled ports. Use the “no”
form of the command to enable the transmission and receipt of BPDUs.
Syntax
spanning-tree portfast bpdufilter default
no spanning-tree portfast bpdufilter default
Default Configuration
This feature is disabled by default.
Command Mode
Global Configuration mode, Interface Configuration mode (physical
interface and port-channels)
User Guidelines
BPDU filtering disables both the sending and receiving of BPDUs on portfast
enabled ports.
A port enabled for BPDU filtering does not receive or send any BPDUs. It is
possible that a network loop may result if BPDU filtering is enabled on a port
connected to anything other than an end system.
BPDU filtering is appropriate for configuration on portfast enabled interfaces
that are connected to end system hosts where it is desired to not send BPDUs
to the host or receive BPDUs from the host. Use the BPDU guard capability if
it is desired to obtain a greater level of protection from rogue hosts or possible
spanning-tree loops.
The administrator must ensure that interfaces enabled for BPDU filtering are
configured as edge ports. Use the spanning-tree portfast command to
configure the interface as an edge port.
Example
The following example discards BPDUs received on spanning-tree ports in
portfast mode.
2CSNXXX_SWUM204.book Page 778 Monday, January 25, 2016 1:25 PM