Configuring PortFast BPDU Guard
Enabling PortFast BPDU Guard
Note
PortFast is configured on an individual port and the PortFast BPDU guard option is enabled globally.
When PortFast is disabled on a port, PortFast BPDU guard becomes inactive.
To enable PortFast BPDU guard on a nontrunking switch port, perform this task in privileged mode:
Task
Step 1
Enable PortFast BPDU guard on the switch.
Step 2
Verify the PortFast BPDU guard setting.
This example shows how to enable PortFast BPDU guard and verify the configuration:
Console > (enable) set spantree portfast bpdu-guard enable
Spantree portfast bpdu-guard enabled on this switch.
Console> (enable) show spantree summary
Root switch for vlans: none.
Portfast bpdu-guard enabled for bridge.
Uplinkfast disabled for bridge.
Backbonefast disabled for bridge.
Vlan
----- -------- --------- -------- ---------- ----------
1
2
3
4
5
6
10
20
50
100
152
200
300
400
500
521
524
570
801
802
850
917
999
1003
1005
Blocking Listening Learning Forwarding STP Active
----- -------- --------- -------- ---------- ----------
Total
Console> (enable)
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
8-4
Chapter 8
Blocking Listening Learning Forwarding STP Active
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Configuring Spanning Tree PortFast, UplinkFast, and BackboneFast, and Loop Guard
Command
set spantree portfast bpdu-guard enable
show spantree summary
0
4
0
4
0
4
0
4
0
4
0
4
0
4
0
4
0
4
0
4
0
4
0
5
0
4
0
4
0
4
0
4
0
4
0
4
0
0
0
0
0
4
0
4
0
4
0
0
0
0
0
85
85
4
4
4
4
4
4
4
4
4
4
4
5
4
4
4
4
4
4
0
0
4
4
4
0
0
78-12647-02