Users Guide

Layer 2 Switching Commands 848
A port enabled for BPDU filtering does not receive or send any BPDUs. It is
possible that a network loop may result if BPDU filtering is enabled on a port
connected to anything other than an end system.
BPDU filtering is appropriate for configuration on portfast enabled interfaces
that are connected to end system hosts where it is desired to not send BPDUs
to the host or receive BPDUs from the host. Use the BPDU guard capability if
it is desired to obtain a greater level of protection from rogue hosts or possible
spanning-tree loops.
The administrator must ensure that interfaces enabled for BPDU filtering are
configured as edge ports. Use the spanning-tree portfast command to
configure the interface as an edge port.
Example
The following example discards BPDUs received on spanning-tree ports in
portfast mode.
console(config)#spanning-tree portfast bpdufilter default
spanning-tree portfast default
Use the spanning-tree portfast default command to enable portfast mode on
access ports. Interfaces configured as access mode ports are considered to be
edge ports. Use the no form of this command to disable portfast mode on all
ports.
Syntax
spanning-tree portfast default
no spanning-tree portfast default
Default Configuration
Portfast mode is disabled by default.
Command Mode
Global Configuration mode
User Guidelines
This command only affects access ports.