cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

6188
Views
0
Helpful
3
Replies
Highlighted
Beginner

BPDU Guard commands

Hello everybody, I'm a CCNP student from Italy. I have a doubt about BPDU Guard commands.

If you have read "CCNP Implementing Cisco IP Switched Networks (SWITCH)", the BPDU Guard section explain the fallowing:

To enable BPDU Guard or to disable BPDU Guard on a Cisco IOS–based Catalyst switch, use the following global configuration command:

[no] spanning-tree portfast edge bpduguard default

Instead, in the "CCNP SWITCH 642-813 Official Certification Guide" explain that the BPDU global configuration command is :

[no] spanning-tree portfast bpduguard default

What is the difference between these two commands ?? They are both correct ?? What mean "edge" in the command above??

What command is better to use ??

Thanks in advance and I hope you have understood me !!

Everyone's tags (7)
3 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

BPDU Guard commands

Hi Pawel,

Both commands are used for the BPDU Guard globally by default on all edge ports of the switch only. See the difference below,

To enable BPDU Guard globally, perform this task

  • Cisco IOS Release 12.2(33)SXI and later releases:

          Router(config)# spanning-tree portfast edge bpduguard default

  • Earlier releases:

          Router(config)# spanning-tree portfast bpduguard default

Refer:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/stp_enha.html#wp1020395

Regards,

Aru

*** Please rate if the post is useful ***

Regards, Aru *** Please rate if the post useful ***

View solution in original post

VIP Expert

BPDU Guard commands

Hi,

[no] spanning-tree portfast bpduguard default

this command was introduced in earlier versions of IOS

old command


[no] spanning-tree portfast edge bpduguard default

This command was intruduced in the later version and the latest. 

new command

So, it all depends on the IOS you are using.

HTH


View solution in original post

Hall of Fame Cisco Employee

BPDU Guard commands

Hello Pawel,

To add to Aru's and Reza's answer, the command syntax was changed because of addition of a so-called Bridge Assurance feature that is currently available on some high-end switches. The Bridge Assurance is activated on ports using the spanning-tree portfast network default - hence the need to distinguish between this feature and the usual PortFast feature that got "moved" to spanning-tree portfast edge default command.

Read more about the Bridge Assurance and its configuration here:

http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/DC_3_0/DC-3_0_IPInfra.html#wp1037363

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/stp_enha.html#wp1052528

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/stp_enha.html#wp1055344

Best regards,

Peter

View solution in original post

3 REPLIES 3
Cisco Employee

BPDU Guard commands

Hi Pawel,

Both commands are used for the BPDU Guard globally by default on all edge ports of the switch only. See the difference below,

To enable BPDU Guard globally, perform this task

  • Cisco IOS Release 12.2(33)SXI and later releases:

          Router(config)# spanning-tree portfast edge bpduguard default

  • Earlier releases:

          Router(config)# spanning-tree portfast bpduguard default

Refer:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/stp_enha.html#wp1020395

Regards,

Aru

*** Please rate if the post is useful ***

Regards, Aru *** Please rate if the post useful ***

View solution in original post

VIP Expert

BPDU Guard commands

Hi,

[no] spanning-tree portfast bpduguard default

this command was introduced in earlier versions of IOS

old command


[no] spanning-tree portfast edge bpduguard default

This command was intruduced in the later version and the latest. 

new command

So, it all depends on the IOS you are using.

HTH


View solution in original post

Hall of Fame Cisco Employee

BPDU Guard commands

Hello Pawel,

To add to Aru's and Reza's answer, the command syntax was changed because of addition of a so-called Bridge Assurance feature that is currently available on some high-end switches. The Bridge Assurance is activated on ports using the spanning-tree portfast network default - hence the need to distinguish between this feature and the usual PortFast feature that got "moved" to spanning-tree portfast edge default command.

Read more about the Bridge Assurance and its configuration here:

http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/DC_3_0/DC-3_0_IPInfra.html#wp1037363

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/stp_enha.html#wp1052528

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/stp_enha.html#wp1055344

Best regards,

Peter

View solution in original post

CreatePlease to create content
Content for Community-Ad