09-21-2012 03:51 AM - edited 03-07-2019 09:00 AM
Hello everybody, I'm a CCNP student from Italy. I have a doubt about BPDU Guard commands.
If you have read "CCNP Implementing Cisco IP Switched Networks (SWITCH)", the BPDU Guard section explain the fallowing:
To enable BPDU Guard or to disable BPDU Guard on a Cisco IOS–based Catalyst switch, use the following global configuration command:
[no] spanning-tree portfast edge bpduguard default
Instead, in the "CCNP SWITCH 642-813 Official Certification Guide" explain that the BPDU global configuration command is :
[no] spanning-tree portfast bpduguard default
What is the difference between these two commands ?? They are both correct ?? What mean "edge" in the command above??
What command is better to use ??
Thanks in advance and I hope you have understood me !!
Solved! Go to Solution.
09-21-2012 05:32 AM
Hi Pawel,
Both commands are used for the BPDU Guard globally by default on all edge ports of the switch only. See the difference below,
To enable BPDU Guard globally, perform this task
Router(config)# spanning-tree portfast edge bpduguard default
Router(config)# spanning-tree portfast bpduguard default
Refer:
Regards,
Aru
*** Please rate if the post is useful ***
09-21-2012 05:33 AM
Hi,
[no] spanning-tree portfast bpduguard default
this command was introduced in earlier versions of IOS
old command
[no] spanning-tree portfast edge bpduguard default
This command was intruduced in the later version and the latest.
new command
So, it all depends on the IOS you are using.
HTH
09-21-2012 07:32 AM
Hello Pawel,
To add to Aru's and Reza's answer, the command syntax was changed because of addition of a so-called Bridge Assurance feature that is currently available on some high-end switches. The Bridge Assurance is activated on ports using the spanning-tree portfast network default - hence the need to distinguish between this feature and the usual PortFast feature that got "moved" to spanning-tree portfast edge default command.
Read more about the Bridge Assurance and its configuration here:
Best regards,
Peter
09-21-2012 05:32 AM
Hi Pawel,
Both commands are used for the BPDU Guard globally by default on all edge ports of the switch only. See the difference below,
To enable BPDU Guard globally, perform this task
Router(config)# spanning-tree portfast edge bpduguard default
Router(config)# spanning-tree portfast bpduguard default
Refer:
Regards,
Aru
*** Please rate if the post is useful ***
09-21-2012 05:33 AM
Hi,
[no] spanning-tree portfast bpduguard default
this command was introduced in earlier versions of IOS
old command
[no] spanning-tree portfast edge bpduguard default
This command was intruduced in the later version and the latest.
new command
So, it all depends on the IOS you are using.
HTH
09-21-2012 07:32 AM
Hello Pawel,
To add to Aru's and Reza's answer, the command syntax was changed because of addition of a so-called Bridge Assurance feature that is currently available on some high-end switches. The Bridge Assurance is activated on ports using the spanning-tree portfast network default - hence the need to distinguish between this feature and the usual PortFast feature that got "moved" to spanning-tree portfast edge default command.
Read more about the Bridge Assurance and its configuration here:
Best regards,
Peter
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide