Cisco Nexus 5000 Series Switch CLI Software Configuration Guide, NX-OS 4.0(1a)N1 (OL-16597-01, January 2009)

Send feedback to [e-mail]
10-9
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 10 Configuring STP Extensions
Configuring STP Extensions
To enable BPDU Guard globally, perform this task:
This example shows how to enable BPDU Guard on all spanning tree edge ports:
switch# configure terminal
switch(config)# spanning-tree port type edge bpduguard default
Enabling BPDU Guard on Specified Interfaces
You can enable BPDU Guard on specified interfaces. Enabling BPDU Guard shuts down the port if it
receives a BPDU.
You can configure BPDU Guard on specified interfaces as follows:
• spanning-tree bpduguard enable—Unconditionally enables BPDU Guard on the interface.
• spanning-tree bpduguard disable—Unconditionally disables BPDU Guard on the interface.
• no spanning-tree bpduguard—Enables BPDU Guard on the interface if it is an operational edge
port and if the spanning-tree port type edge bpduguard default command is configured.
Before you configure this feature, you should do the following:
• Ensure that STP is configured.
To enable BPDU Guard on an interface, perform this task:
This example shows how to explicitly enable BPDU Guard on the Ethernet edge port 1/4:
switch# configure terminal
switch (config)# interface ethernet 1/4
switch(config-if)# spanning-tree bpduguard enable
Command Purpose
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# spanning-tree port type
edge bpduguard default
Enables BPDU Guard by default on all spanning tree
edge ports. By default, global BPDU Guard is
disabled.
Command Purpose
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# interface type slot/port
Specifies the interface to configure, and enters the
interface configuration mode.
Step 3
switch(config-if)# spanning-tree
bpduguard {enable | disable}
Enables or disables BPDU Guard for the specified
spanning tree edge interface. By default, BPDU Guard
is disabled on physical Ethernet interfaces.