Habilitar BPDU Guard en Cisco Catalyst

Habilitaremos BPDU Guard (default) y apliacaremos a un rango de interfaces, en un switch Cisco Catalyst 2950-X

 

 Para conocer que es BPDU, visitar:

• https://es.wikipedia.org/wiki/Spanning_tree

• http://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10586-65.html

 

Acceder al Switch

SW210>enable

SW210#configure

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line.  End with CNTL/Z.

Habilitar BPDU

SW210(config)#spanning-tree portfast bpduguard default

CONFIGURAR RANGO

SW210(config)#interface range gigabitEthernet1/0/13-24

SW210(config-if-range)#spanning-tree portfast

%Warning: portfast should only be enabled on ports connected to a single

host. Connecting hubs, concentrators, switches, bridges, etc... to this

interface  when portfast is enabled, can cause temporary bridging loops.

Use with CAUTION

%Portfast will be configured in 12 interfaces due to the range command

but will only have effect when the interfaces are in a non-trunking mode.

SW210(config-if-range)#end

Guardar la configuración

SW210#copy running-config startup-config

Destination filename [startup-config]?

Building configuration...

[OK]

Ver la configuración

SW210#show spanning-tree summary

Switch is in pvst mode

Root bridge for: VLAN022, VLAN0033

EtherChannel misconfig guard is enabled

Extended system ID           is enabled

Portfast Default             is disabled

PortFast BPDU Guard Default  is enabled

Portfast BPDU Filter Default is disabled

Loopguard Default            is disabled

UplinkFast                   is disabled

BackboneFast                 is disabled

Configured Pathcost method used is short

Name                   Blocking Listening Learning Forwarding STP Active

---------------------- -------- --------- -------- ---------- ----------

VLAN0011                     0         0        0         27         27

VLAN0022                     0         0        0          4          4

VLAN0033                     0         0        0          4          4

---------------------- -------- --------- -------- ---------- ----------

3 vlans                      0         0        0         35         35

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

SW210#show spanning-tree summary totals

Switch is in pvst mode

Root bridge for: VLAN0022, VLAN0033

EtherChannel misconfig guard is enabled

Extended system ID           is enabled

Portfast Default             is disabled

PortFast BPDU Guard Default  is enabled

Portfast BPDU Filter Default is disabled

Loopguard Default            is disabled

UplinkFast                   is disabled

BackboneFast                 is disabled

Configured Pathcost method used is short

Name                   Blocking Listening Learning Forwarding STP Active

---------------------- -------- --------- -------- ---------- ----------

3 vlans                      0         0        0         35         35

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

SW210#show spanning-tree active

VLAN0011

  Spanning tree enabled protocol ieee

  Root ID    Priority    32768

             Address     0001.f467.d0a0

             Cost        4

             Port        46 (GigabitEthernet1/0/46)

             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    32769  (priority 32768 sys-id-ext 1)

             Address     008e.73ee.bb00

             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec

             Aging Time  300 sec

Interface           Role Sts Cost      Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Gi1/0/12            Desg FWD 100       128.12   P2p Edge

Gi1/0/14            Desg FWD 4         128.14   P2p Edge

Gi1/0/16            Desg FWD 19        128.16   P2p Edge

Gi1/0/19            Desg FWD 4         128.19   P2p Edge

Gi1/0/23            Desg FWD 4         128.23   P2p Edge

Gi1/0/28            Desg FWD 4         128.28   P2p Edge

Gi1/0/29            Desg FWD 19        128.29   P2p Edge

Gi1/0/31            Desg FWD 19        128.31   P2p Edge

Gi1/0/34            Desg FWD 19        128.34   P2p Edge

Gi1/0/35            Desg FWD 4         128.35   P2p Edge

Gi1/0/36            Desg FWD 19        128.36   P2p Edge

Gi1/0/38            Desg FWD 19        128.38   P2p Edge

Gi1/0/39            Desg FWD 19        128.39   P2p Edge

Gi1/0/41            Desg FWD 4         128.41   P2p Edge

Gi1/0/42            Desg FWD 19        128.42   P2p Edge

Gi1/0/43            Desg FWD 19        128.43   P2p Edge

Gi1/0/44            Desg FWD 19        128.44   P2p Edge