Configuring stp port fast bpdu root guard

spanning tree

How do you configure spanning tree port fast bpdu root guard on cisco 3560 switch? Can anyone tell me if there's any difference in the configuration of stp port fast bpdu root guard in cisco 3560 and 2960 switches?

Best Answer

Use spanning-tree portfast, and spanning-tree bpduguard enable on each switchport. Root guard is unnecessary on ports with this configuration, because bpduguard will err-disable the port when you receive any bpdus.

Use root guard on links to other switches, which are not planned for the primary or secondary stp root role.