An article on Computer Certification and related topics

For additional information and special deals related to some of the items on this article, place your cursor over the double-underlined links. All information supplied by Kontera.com

Cisco CCNP / BCMSN Exam Tutorial: Configuring PortFast And BPDU Guard

By: Chris Bryant

In your CCNA studies, you learned about PortFast and the trouble it can cause if configured on the wrong port! Suitable only for switch ports connected directly to a single host, PortFast allows a port running STP to go directly from blocking to forwarding mode.

A Cisco router will give you a warning when you configure PortFast:

SW1(config)#int fast 0/5

SW1(config-if)#spanning-tree portfast

%Warning: portfast should only be enabled on ports connected to a
single host. Connecting hubs, concentrators, switches, bridges, etc...
to this interface when portfast is enabled, can cause temporary
bridging loops. Use with CAUTION

%Portfast has been configured on FastEthernet0/5 but will only

have effect when the interface is in a non-trunking mode.

SW1(config-if)#

Not only will the switch warn you about the proper usage of PortFast, but you must put the port into access mode before PortFast will take effect.

Now, you'd think that would be enough of a warning, right? But there is a chance - just a chance - that someone is going to manage to connect a switch to a port running Portfast. That could lead to two major problems, the first being the formation of a switching loop. Remember, the reason we have listening and learning modes is to help prevent switching loops. The next problem is that there could be a new root bridge elected - and it could be a switch that isn't even in your network!

BPDU Guard protects against this disastrous possibility. If any BPDU comes in on a port that's running BPDU Guard, the port will be shut down and placed into error disabled state, shown on the switch as err-disabled. A port placed in err-disabled state must be reopened manually.

BPDU Guard is off on all ports by default, and is enabled as shown here:

SW1(config)#int fast 0/5

SW1(config-if)#spanning-tree bpduguard enable

It's a good idea to enable BPDU Guard on any port you're running PortFast on. There's no cost in overhead, and it does prevent the possibility of a switch sending BPDUs into a port configured with PortFast - not to mention the possibility of a switch not under your control becoming a root switch to your network!

Article Source: http://ezine-articles-planet.com

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNA exam with Chris Bryant!

Please Rate this Article

Not yet Rated

Click the XML Icon Above to Receive Computer Certification Articles Via RSS!

Additional Articles From - Home | Computer | Computer Certification

ABCO Technology The leading Computer Training Center USA - By : abco technology
CCENT, CCNA, CCNP, CCIE Interview Questions - By : M. Aslam
List of Microsoft Certifications - By : Aamir Zahir
Microsoft Certification Preparation Guide For 70-290 Exam - By : Xena
Resources Help You to Pass CCNA 640-802 - By : Royce Gainsborough
Why Should You Avoid Getting a Braindump Certification? - By : M. Aslam
10 CCENT, CCNA, CCNP Interview Questions - By : M. Aslam
A word about MCSE, A+ and CCNA Braindump Certification. - By : M. Aslam
Benefits of latest computer training - By : abcotechnology.com
RIP (Routing Information Protocol) - By : M. Aslam

Authors, Sign Up for a free account or learn more.

	Print This Article
	Post Comment
	Add To Favorites
	Email to Friends
	Ezine Ready

Writers/Authors Submission Guidelines
Member Login
Submit Articles
Most Popular Articles

Publishers Article RSS Feeds
Terms of Service

Free Affiliate Training

Share This Page:

Site Information Link to Us
About Us
Site Blog
Contact Us
Privacy Policy
Multi Site Article Search
Links Directory

AdSense Secrets v4.0

First Universal Platnum $7500 Guaranteed

Is This Site Useful?
If you found this site useful, please consider buy the webmaster coffee and get a free link back to your site!

Thanks for your support!

Please Rate and Vote For Us: