Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.
3.5.4. STP Protection Mechanisms
| Feature | Purpose | Action |
|---|---|---|
| BPDU Guard | Disable port if BPDU received | Err-disable port |
| BPDU Filter | Stop sending/receiving BPDUs | Disables STP |
| Root Guard | Prevent switch from becoming root | Block superior BPDUs |
| Loop Guard | Prevent unidirectional link failure | Block if no BPDUs received |
BPDU Guard Configuration (recommended with PortFast):
Switch(config)# interface GigabitEthernet0/1
Switch(config-if)# spanning-tree portfast
Switch(config-if)# spanning-tree bpduguard enable
Enable globally:
Switch(config)# spanning-tree portfast bpduguard default
Verification:
Switch# show spanning-tree vlan 10
Switch# show spanning-tree interface GigabitEthernet0/1 detail
Switch# show spanning-tree summary