BPDUguard

[oddyager]

or can it be enabled for only certain ports on a switch?

 

[Cooky]

Newer switches accept the bpduguard option (w/ portfast command) as global and interface command.
Older ones only accept it as global command.

 

[spidey07]

Originally posted by: Cooky
Newer switches accept the bpduguard option (w/ portfast command) as global and interface command.
Older ones only accept it as global command.

yep...depends on the IOS.

apply it to all host ports.

 

[oddyager]

Thanks all. Along the same line, can you configure the max no. of secure mac addresses per port globally on a 3550? I know the commands to do it by interface but am wondering if I can save a couple of hundred keystrokes if there is a global setting. I recall that you can provide a port range for the security to apply...

 

[spidey07]

use the interface range command

int range f0/1 - 48

 

[oddyager]

Thanks, you're a life and "fingers" saver.

 

[spidey07]

if you have to do a lot of switches just use note pad to copy/paste the commands you need.

 

[oddyager]

Yeah I might have to do just that.

I noticed I can't do int range though with the 3548's (using IOS 12.0(5)) but I can use the CNA to select multiple ports. However if I choose any value higher then 1 for max no. of secure mac addresses it tells me its an error even though the value range is from 1 to 132. Have you ever seen this before? If I can do this through command line similar to the 3550 and up with int range that would be cool.