Users Guide

Enabling PortFast and BPDU Guard on a Port
The following section guides you to enable the PortFast and BPDU Guard features on a port.
In the Web UI
Follow the steps below to enable PortFast and BPDU Guard features on a port using the WebUI:
1. Navigate to Configuration>Branch>Smart Config and select the Networking tab.
2. In the Ports table, click the port number for which you want to enable PortFast and BPDU Guard.
3. Click Edit.
4. Select the PortFast and BPDU Guard checkbox.
5. Click Update.
To disable PortFast and BPDU Guard uncheck the PortFast and BPDU Guard checkboxes.
It is recommended to enable PortFast only on access port types. However, PortFast can be enabled on the trunk ports
by selecting the Trunk checkbox in the WebUI.
In the CLI
Execute the following commands at the command prompt to enable PortFast and BPDUGuard:
(host) (config) #interface gigabitinternet 0/0/4
(host) (config-if)#spanning-tree portfast
(host) (config-if)#spanning-tree bpduguard
To disable PortFast
(host) (config-if) #no spanning-tree portfast
(host) (config-if) #no spanning-tree bpduguard
Execute the following command to enable PortFast on trunk ports:
(host) (config) #interface gigabitethernet 0/0/4
(host) (config-if)#spanning-tree portfast trunk
Execute the following show command to display the status of the STP ports in Global RSTP mode.
(host) (config-if) #show spanning-tree interface gigabitethernet 0/0/4
Execute the following show command to display the status of the STP ports in Instance RSTP (PVST) mode.
(host) #show spanning-tree interface gigabitethernet 0/0/4
Execute the following command to display the status of BPDU Guard enabled port that is in ErrDis state. This
command is applicable for ports that are in both the Global RSTP and Instance RSTP (PVST) modes.
(host) (config-if) #show spanning-tree interface gigabitethernet 0/0/4
Preventing WANLink Failure on Virtual APs
In the branch controller deployments, the local controllers are connected across the WAN link from the master
controller to the RADIUS server. A WAN link outage will result in service outage as new users cannot be
authenticated to 802.1X Virtual APs. This feature provides limited connectivity to branch controllers even
when the WAN link is down. To provide connectivity when the WAN link is down, open and PSK SSID Virtual APs
(VAPs) are available at all times and the user can connect to these VAPs instead of the main 802.1X Virtual AP.
Currently, this feature is targeted for Campus APs in branch office deployments.
Dell Networking W-Series ArubaOS 6.4.x | User Guide BranchController Config for Controllers | 322