switch setup best practices

[carl_townshend]

Hi all, when setting up my lan switches, can anyone give me the recommended best practices for setup, ie bpdu guard, broadcast supression etc ?

[ccannon88567]

All depends on your network and network policies.

Be carefull when using storm control, if set too high can cause major problems.

Personally, I don't use broadcast surpresion as we invest more heavilly in IDS/IPS and firewall systems.

[b.julin]

This link is a bit dated but it is still helpful, however you should note to either use bpduguard instead of bpdufilter, or to use only the global portfast bpdufilter command and not use the one that goes directly on the interface.

http://www.cymru.com/gillsr/documents/catalyst-secure-template.htm

[carl_townshend]

can you show me what this command for global portfast looks like, how do you make sure its not used on the uplinks in this case ?