KB.15.15

packets are received on a protected port, the feature will disable that port and alert the network

manager via an SNMP trap as shown in Figure 20 (page 138).

Figure 20 BPDU protection enabled at the network edge

The following commands allow you to configure BPDU protection on VLANs for which the port is

a member.

Syntax:

[no] spanning-tree port-list bpdu-protection

Enables/disables the BPDU protection feature on a port.

Default: Disabled.

Syntax:

[no] spanning-tree port-list bpdu-protection-timeout timeout

Configures the duration of time when protected ports receiving unauthorized BPDUs

will remain disabled. The default value of 0 (zero) sets an infinite timeout (that is,

ports that are disabled by bpdu-protection are not, by default, re-enabled

automatically).

Default: 0

Range: 0 - 65535 seconds

Syntax:

[no] spanning-tree trap errant-bpdu

138 Rapid per-VLAN spanning tree (RPVST+) operation