Cisco Nexus 5000 Series Switch CLI Software Configuration Guide, NX-OS 4.0(1a)N1 (OL-16597-01, January 2009)

Send feedback to nx5000-docfeedback@cisco.com
10-10
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 10 Configuring STP Extensions
Configuring STP Extensions
To disable BPDU Guard on an interface, perform this task:
Enabling BPDU Filtering Globally
You can enable BPDU Filtering globally by default on spanning tree edge ports.
If an edge port with BPDU Filtering enabled receives a BPDU, it loses its operation status and as edge
port and resumes the regular STP transitions. However, this port maintains it configuration as an edge
port.
Caution Be careful when using this command. Using this command incorrectly can cause bridging loops.
Before you configure this feature, you should do the following:
Ensure that STP is configured.
Ensure that you have configured some spanning tree edge ports.
Note When enabled globally, BPDU Filtering is applied only on ports that are operational edge ports. Ports
send a few BPDUs at linkup before they effectively filter outbound BPDUs. If a BPDU is received on an
edge port, it immediately loses its operational edge port status and BPDU Filtering is disabled.
To enable BPDU Filtering globally, perform this task:
This example shows how to enable BPDU Filtering on all operational spanning tree edge ports:
switch# configure terminal
switch(config)# spanning-tree port type edge bpdufilter default
Enabling BPDU Filtering on Specified Interfaces
You can apply BPDU Filtering to specified interfaces. When enabled on an interface, that interface does
not send any BPDUs and drops all BPDUs that it receives. This BPDU Filtering functionality applies to
the entire interface, whether trunking or not.
Command Purpose
switch(config-if)# no spanning-tree
bpduguard
Enables BPDU Guard on the interface if it is an
operational edge port and if you enter the
spanning-tree port type edge bpduguard default
command.
Command Purpose
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# spanning-tree port type
edge bpdufilter default
Enables BPDU Filtering by default on all operational
spanning tree edge ports. Global BPDU Filtering is
disabled by default.