Brocade Multi-Service IronWare Switching Configuration Guide (Supporting R05.6.00) - Manual (Page 356)

326 Multi-Service IronWare Switching Configuration Guide
53-1003036-02
IEEE 802.1D Spanning Tree Protocol (STP)
12
Enabling BPDU Guard and disabling a port that receives BPDUs
You can enable BPDU Guard on a port and at the same time configure a port to be disabled when it
receives a BPDU. Enter the following commands.
Brocade(config) interface ethe 2/1
Brocade(config-if-e1000-2/1)#spanning-tree protect do-disable
Syntax: [no] spanning-tree protect do-disable
If both spanning-tree protect and spanning-tree protect do-disable are configured on an interface,
spanning-tree protect do-disable takes precedence. This means that when the port receives a
BPDU, the port will drop the BPDU and disable the port.
If you issue a no spanning-tree protect do-disable command, the port will be re-enabled and will no
longer be disabled when it receives a BPDU. The following message is displayed when you enter the
no spanning-tree protect do-disable command.
This command removes only "spanning-tree protect do-disable". To remove
"spanning-tree protect", please issue a separate command "no spanning-tree
protect".
Re-Enabling a port disabled due to BPDU guard
A port disabled by the spanning-tree protect do-disable command can be enabled by the following
commands:
• Entering the no spanning-tree protect do-disable command.
• Entering the spanning-tree protect re-enable command. Make sure the offending BPDUs have
stopped before issuing this command; otherwise, the port will be disabled again once it
receives a new BPDU.
Brocade(config)# interface ethernet 1/4
Brocade(config-if-e10000-1/4)#spanning-tree protect re-enable
Syntax: [no] spanning-tree protect re-enable
Issuing the spanning-tree protect re-enable command does not remove the spanning-tree protect
do-disable configuration on the port. If a new BPDU is received on the port, the port will be disabled
again. To prevent this from happening, you can do one of the following:
• Remove the spanning-tree protect do-disable configuration by issuing the no spanning-tree
protect do-disable command, followed by the spanning-tree protect re-enable command to
re-enable the port.
• Remove the source of the offending BPDUs from the network.
This command does not have a no form.
Displaying BPDU Guard configuration
To determine if BPDU Guard is configured on the device, enter the following command.
Brocade#show spanning-tree protect