Bpdu guard status still reflected disabled after configuration

Hi,
Has anyone encountered after configuring
(config#)spanning-tree portfast bpduguard default
bpdu guard status still reflected disabled after configuration using
#sh spanning-tree summary totals
Thanks.
Christina

BPDU Guard takes effect only on portfast ports. You can therefore think of BPDU guard the same as portfast BPDU guard when a port is a portfast port.
PortFast BPDU guard can prevent loops by moving a nontrunking port into the errdisable state when a BPDU is received on that port. When the BPDU guard feature is enabled on the switch, spanning tree shuts down PortFast-configured interfaces that receive BPDUs, rather than putting them into the spanning tree blocking state. In a valid configuration, PortFast-configured interfaces do not receive BPDUs. Reception of a BPDU by a PortFast-configured interface signals an invalid configuration, such as connection of an unauthorized device. The BPDU guard feature provides a secure response to invalid configurations, because the administrator must manually put the interface back in service.
When enabled on the switch, spanning tree applies the PortFast BPDU guard
feature to all PortFast-configured interfaces.
Portfast BPDU guard can be enabled or disabled on a global basis, thus
affecting all ports with portfast configured.
http://www.cisco.com/en/US/tech/tk389/tk621/technologies_tech_note09186a008009482f.shtml

Similar Messages

  • Sales Order status still "Being processed" after invoice (3rd party sales)

    Dear SD gurus,
    Here's what is done so far:
    1. Create a sales order with one line (TAS item cat).
    2. Trigger PR to be created. Approved the PR.
    3. Create Purchase Order. Approve the PO.
    4. Perform MIRO.
    5. Create sales invoice based on sales order (billing based on supplier invoice).
    6. Invoice released to accounting
    Now, when I checked the sales order status, it's still showing "Being processed". However, invoice have already been created and released. I'm just wondering what else have I done wrongly. I believe the status should show "Completed" as well otherwise this order will keep showing up as outstanding in my sales order listing report.
    Anyone got any ideas?

    SAM
    I had a looked at both the SAP Notes provided. Doesn't really apply in my situation. The Sales order was for 10 qty. My PR for 10 qty and I have also done a MIRO for 10 qty. even my sales invoice was for 10 qty.
    I do not want to configure it to follow the PO quantity because I need a control where only vendor has delivered the products to the customer only then I should invoice the customer accordingly. If I allow the invoice to be created based on the PO quantity then the control factor will be lost.
    I have yet to try the program that you recommended... will try that shortly.
    And yes ... since I'm using the standard sap TAS item cat ... the "relevance for delivery" is already turned off and the billing is "F"

  • HT1212 My ipod still says ipod disabled after trying to connect to itunes to reset.  What else can be done?

    My ipod touch still says disabled after following tips in itunes support.  Never opened in tunes once connected to computer.  What is my next option?

    iOS: Unable to update or restore

  • How to configure PortFast & BPDU Guard on an Aruba controller.

    Requirement:
    An Aruba controller running 6.4.3.x and above.
    Solution:
    PortFast:
    PortFast feature basically causes a switch port or a trunk port to directly enter the forwarding state instead of going through listening and learning state of the STP.
    PortFast is usually configured on an edge port, which means this port should not receive any STP BPDUs.
    If this port receives any STP BPDU, this port moves back to normal/regular mode and will end up participating in listening and learning states.
    BPDU Guard:
    The BPDU Guard feature basically guards the port against receiving any BPDUs.
    If it detects any incoming BPDUs on the port, it would put the port into ErrDis (Error-Disable).
    This port remains in the ErrDis state unless until this port is manually changed by using a configuration command “shut” followed by a “no-shut” applied on this interface.
    Configuration:
    Below screen shot show the configuration of Portfast for both Trunk and Access ports.
    Below screen shot shows the configuration of BPDU Guard for switch ports.
    Verification
    We can verify if the Portfast is enabled using the commands shown in below screen shot.
    We can verify if the BPDU Guard is enabled using commands shown in below screen shot.

    I was having troubles with this as well when a customer had an older Aruba Controller and 2 Access Points. We went with a couple IAP-205s and needed LDAP integration. Using the above configuration there were some additional items needed. I found that I needed the DISPLAY NAME of the admin for the Admin-DN. I had created a user with the first name Aruba and the last name LDAP. This made the DISPLAY NAME "Aruba LDAP". This is what needs to be in the CN= for the Admin-DN.I also found there is a difference in using the CN= and OU=Currently our admin account is in the Users group which is a “Container”. Our actual user accounts are stored in an Orginizational Unit with sub OUs as well. So the Admin-DN needed the CN=Users and the Base-DN needed the OU=MyUserOU.For the windows machines I had to download and install the Aruba GTC Shim because the customer was previously using GTC and they were not going to a RADIUS server at the moment. My Android phone and IPHONE did not need any additional addins for the authentication.  The windows laptop I am using I needed to manually create a wireless profile with… Security Tab >“Choose a network authentication method:”Microsoft: Protected EAP (PEAP)Settings >Select “Trusted Root Certification Authorities”GeoTrust Global CASelect Authentication Method:EAP-Token (This is the Aruba GTC Shim) This allowed me to use my domain login credentialsUsernamePasswordDomain (This is blank because the Base-DN already has this, if anything is put in here the authentication fails)

  • Assistance Disabling BPDU Guard: Catalyst 3560 CG

    Good Morning Guys,
    Here's the situation:
    Configuring  cisco wireless bridges -  every time I get both devices up in my wireless controller, the port my root bridge is connected to on the catalyst 3560 CG switch gets disabled with the following error:
    "SPANTREE - 2- BLOCK_BPDUGUARD: Received BPDU on port,  *** with BPDU Guard enabled, disabling port."
    I've done some research on BPDU Guard and I've tried applying the following commands to no avail:
    1. errdisable detect cause bpdguard shutdown vlan    (global and config mode)
    2. spanning-tree bpduguard disable           (configuration mode at the interface)
    any assistance to prevent the port from shutting down would be greatly appreciated.
    Christian

    You should double check the interface configs on both. It is shutting the port down because it is receiving BPDUs. This could be cause your switch port is configured for access but the WLC is configured as trunk...

  • RE: Author status still blue and also Pause button is disabled.

    My author status still says blue even though the cloud status is "installed".  Also, not sure why the pause button is disabled.  I'd like to pause the cloud when I'm not using it.

    It's green now and I can pause it.  Please disregard.  I still cannot login to author though.

  • My phone is still disabled after software update and i cannot seem to reset my passcode someone help me

    my phone is still disabled after software update and i cannot seem to reset my passcode someone please help

    Does the Ipod see the network?
    It sure sound like the drop cause some other internal damage like breaking/loosening the connection to the  antenna. See:
    http://www.ifixit.com/Teardown/iPod-Touch-4th-Generation-Teardown/3562/3

  • After configuring my office email simple passcode option disabled in iphone how to enable it back

    After configuring my Office e-mail in Exchange, simple passocde option got disabled and "Erase data" is enabled?
    is there any way to change this, if so your advice is much appriecated.
    Thank you much!

    To re-enable a simple passcode, open your Exchange Management Console, open the properties of Organization Configuration/Client Access. Uncheck Require alphanumeric password.
    Exchange Administrators always have the option of erasing the data of a remote device, I don't think that can be disabled.

  • BPDU Guard without ERR-Disable

    Hi Everyone, 
    I recently had an instance in one of my networks where a user plugged in a home router to our network. The router then started handing out incorrect IP addresses to clients. 
    I know I can use DHCP Snooping or BPDU guard to stop this happening again and we do have BPDU Guard running at other sites successfully. The problem has always been if we enable it in a new production network we might disable ports that have legitimate devices on the other end. For example someone is using a small switch to share a port between a PC and a printer.
    Is there a way of turning on BPDU guard but without it putting ports into an Err-Disabled mode and just alerting in the logs instead?
    Regards, Daniel

    Hi Leo, 
    Thanks for your input in the discussion. However I think you are misunderstanding why I am asking this question.
    I WANT to enable BPDU guard on this network, I know its not a PIA and I am well aware of what it does and why it would be implemented.
    The reason I am asking this question is because I need to transition from a network that doesn't have BPDU guard enabled to one that does. If i turn the feature on it will start disabling ports on switches and stop peoples workflow until it is resolved. The reason people have unidentified switches plugged into the network might be legitimate, but the way they got around their problem wasn't the best. 
    My goal is to find out where these rogue switches are, find out why they are there. Find an alternative way to connect these devices to the network by either purchasing new switches or running more cabling.  This network does not have any onsite IT and therefor all this needs to be figured out remotely.
    So the crux of the problem is. How to find STP devices that are plugged into my switches.
    Thoughts?

  • TS2446 Apple ID still disable after resetting password. What is the fix?

    Apple ID still disable after resetting password. What is the fix?

    Welcome to the Apple community.
    If you have tried Apple's recommendation to reset your password, and it has not succeeded, then I suggest you contact Apple using the Express Lane (select your country, navigate to iCloud help and enter the serial number of one of your devices)

  • BPDU guard - weird situation

    Hi guys,
    This morning unpleasant surprise happened to me. One of critical ports was err-disabled because of BPDU guard (device B). This wouldn't be surprise if this port (on Device B) wasn't configured as L3 port (I agree that BPDU filter shouldn't be enabled at all here, this is legacy config), and other end have BPDU filter enabled (Device A). Here is port config:
    Device A:
    interface GigabitEthernet4/0/24
     switchport access vlan 10
     switchport trunk encapsulation dot1q
     switchport mode access
     switchport nonegotiate
     logging event trunk-status
     spanning-tree bpdufilter enable
    Device B:
    interface GigabitEthernet2/45
     no switchport
     ip address 10.0.0.1 255.255.252.0
     ip helper-address 172.16.249.5
     logging event link-status
     logging event trunk-status
     spanning-tree portfast
     spanning-tree bpduguard enable
    Log from Device B indicating that it was err-disabled:
    Apr 20 20:08:52.336 CETS: %SPANTREE-2-BLOCK_BPDUGUARD: Received BPDU on port Gi2/45 with BPDU Guard enabled. Disabling port.
    Apr 20 20:08:52.336 CETS: %PM-4-ERR_DISABLE: bpduguard error detected on Gi2/45, putting Gi2/45 in err-disable state
    Log form Device A indicating that BPDU never sent from this port:
    DeviceA#show spanning-tree vlan 10 detail
     Port 186 (GigabitEthernet4/0/24) of VLAN0010 is designated forwarding
       Port path cost 4, Port priority 128, Port Identifier 128.186.
       Designated root has priority 28740, address 001a.6da4.f000
       Designated bridge has priority 28740, address 001a.6da4.f000
       Designated port id is 128.186, designated path cost 0
       Timers: message age 0, forward delay 0, hold 0
       Number of transitions to forwarding state: 1
       Link type is point-to-point by default
       Bpdu filter is enabled
       BPDU: sent 0, received 0
    Did anyone had ever similar experience? By all logical explanations, this should never happen
    Thanks

    On the other hand, most SOHO switches do not implement Spanning Tree. If you are concerned about users installing switches, you need to take other precautions as well.
    You can stop the users using a switch to fan out a port, by configuring port security and only allowing one MAC address on the port.
    The BPDU guard will give you some protection against certain malicious user practices, even if the rogue switch does not do Spanning Tree. For example, the user who plug in a SOHO switch, and then plugs two other ports of that SOHO switch back-to-back with a cross-cable. In this case, your Catalyst will see its own BPDUs circulating round the loop, and will close the port down. (If the SOHO switch is not doing Spanning Tree, then it will pass the BPDUs through transparently.) This is why you should not have bdpu-guard and bpdu-filter on the same port.
    Kevin Dorrell
    Luxembourg

  • HT1766 my ipad has disabled after asking for a passcode which has never been put on this ipad and now disabled itself ???

    my ipad has disabled itself after asking for a passcode after updating ios7 now tried to restore it but didnt work

    iOS: Device disabled after entering wrong passcode
    http://support.apple.com/kb/ht1212
    How can I unlock my iPad if I forgot the passcode?
    http://tinyurl.com/7ndy8tb
    How to Reset a Forgotten Password for an iOS Device
    http://www.wikihow.com/Reset-a-Forgotten-Password-for-an-iOS-Device
    Using iPhone/iPad Recovery Mode
    http://ipod.about.com/od/iphonetroubleshooting/a/Iphone-Recovery-Mode.htm
    Saw this solution on another post about an iPad in a school enviroment. Might work on your iPad so you won't lose everything.
    ~~~~~~~~~~~~~
    ‘iPad is disabled’ fix without resetting using iTunes
    Today I met my match with an iPad that had a passcode entered too many times, resulting in it displaying the message ‘iPad is disabled – Connect to iTunes’. This was a student iPad and since they use Notability for most of their work there was a chance that her files were not all backed up to the cloud. I really wanted to just re-activate the iPad instead of totally resetting it back to our default image.
    I reached out to my PLN on Twitter and had some help from a few people through retweets and a couple of clarification tweets. I love that so many are willing to help out so quickly. Through this I also learned that I look like Lt. Riker from Star Trek (thanks @FillineMachine).
    Through some trial and error (and a little sheer luck), I was able to reactivate the iPad without loosing any data. Note, this will only work on the computer it last synced with. Here’s how:
    1. Configurator is useless in reactivating a locked iPad. You will only be able to completely reformat the iPad using Configurator. If that’s ok with you, go for it – otherwise don’t waste your time trying to figure it out.
    2. Open iTunes with the iPad disconnected.
    3. Connect the iPad to the computer and wait for it to show up in the devices section in iTunes.
    4. Click on the iPad name when it appears and you will be given the option to restore a backup or setup as a new iPad (since it is locked).
    5. Click ‘Setup as new iPad’ and then click restore.
    6. The iPad will start backing up before it does the full restore and sync. CANCEL THE BACKUP IMMEDIATELY. You do this by clicking the small x in the status window in iTunes.
    7. When the backup cancels, it immediately starts syncing – cancel this as well using the same small x in the iTunes status window.
    8. The first stage in the restore process unlocks the iPad, you are basically just cancelling out the restore process as soon as it reactivates the iPad.
    If done correctly, you will experience no data loss and the result will be a reactivated iPad. I have now tried this with about 5 iPads that were locked identically by students and each time it worked like a charm.
    ~~~~~~~~~~~~~
    Try it and good luck. You have nothing more to lose if it doesn't work for you.
     Cheers, Tom

  • Cannot set status of Urgent Change after manual transport

    Hi all,
    We are usng CHARM in Solution Manager 7.1 for import to the SAP ECC (EHP6) systems.
    I cannot set the status of the Urgent Change document (ZMHF) to status "To be Tested" after the transports were manually released and manually imported to the ECC QA system.
    When I use action "Pass Urgent Change to Test", the system stopped with error "Not all task are yet released" and will not change the status .
    Based, on the Task List log, the system started the release process although no transports were released.
    Is there any way that I can update the status of the Urgent Change document to "To be Tested"?
    I tried program CRM_SOCM_SERVICE_REPORT but still did not change the status.
    Any suggestion?
    Thanks,
    Tess

    Hi Venu,
    have a look under System Administration - System Configuration -- Knowledge Management -- Configuration --Content Management -- User Interface -- Commands -- UI Command Groups -- StatemanagementGroup.
    See Java class: com.sapportals.wcm.rendering.uicommand.cm.UIStatemanagementGroupCommand. Take the class and decompile this and everything needed around to understand how this class works.
    Then you can choose to extend this CommandGroup to also have a command "Resubmit for Approval" or you can implement your own UI Command only for resubmitting (you will also have to activate your command (group) by settings within the configuration).
    On the other hand, if all this is completely new to you, I'm a bit sceptical if the task isn't a bit too big as a first task on KM implementation topics...?
    Hope it helps
    Detlev

  • Fresh install of solaris 10 x86 hangs after 'Configuring devices'

    Hi All,
    I just received a new SuperMicro server with an LSI MegaRAID SAS 9261-8i controller. While trying to install Solaris 10 it hangs after "Configuring devices". I checked the LSI page and Solaris 10 is supported according to them. Any ideas how to proceed?
    Fairly new to Solaris on x86 hardware.
    The system has a Xeon X5690 processor in an Intel Workstation Board S5520SC motherboard. The motherboard documents claim that not disabling usb 2.0 can hang an install. I have disabled the usb 2.0 in the bios but the system still hangs. Booting it with the -kd and -kv options don't give much information.
    Any help is appreciated. I might be returning these machines if I can't get this worked out.
    Cheers,
    Steve
    Edited by: 967729 on Oct 25, 2012 3:51 PM

    See if you can add the verbose option "-v" to the kernel boot options. I think you can get to the GRUB menu off the Solaris 10 install disk. That should tell you what device is causing the hang, or at least the last device that worked.
    Also, can you try Solaris 11 and see if it gets past that point? A few years ago I has a similar issue with Solaris 10 on a Dell server. Solaris 11/OpenSolaris worked fine, though. IIRC I could work around the issue if I disabled the 2nd CPU - Solaris 10 had a problem bringing up the 2nd CPU on that Dell's CPU/MB config.

  • Ipad disabled after wrong password, is there a reset option?

    Our iPad 2 (running iOS 7) is disabled, after six attempts at the password which had been changed 24 hours earlier, it appears to be permanently disabled.
    I have work files in apps that were not backed up, is there anyway to recover from this stage? 
    Please help.

    How can I unlock my iPad if I forgot the passcode?
    http://www.everymac.com/systems/apple/ipad/ipad-troubleshooting-repair-faq/ipad- how-to-unlock-open-forgot-code-passcode-password-login.html
    iOS: Device disabled after entering wrong passcode
    http://support.apple.com/kb/ht1212
    How can I unlock my iPad if I forgot the passcode?
    http://tinyurl.com/7ndy8tb
    How to Reset a Forgotten Password for an iOS Device
    http://www.wikihow.com/Reset-a-Forgotten-Password-for-an-iOS-Device
    Using iPhone/iPad Recovery Mode
    http://ipod.about.com/od/iphonetroubleshooting/a/Iphone-Recovery-Mode.htm
    You may have to do this several times.
    Saw this solution on another post about an iPad in a school environment. Might work on your iPad so you won't lose everything.
    ~~~~~~~~~~~~~
    ‘iPad is disabled’ fix without resetting using iTunes
    Today I met my match with an iPad that had a passcode entered too many times, resulting in it displaying the message ‘iPad is disabled – Connect to iTunes’. This was a student iPad and since they use Notability for most of their work there was a chance that her files were not all backed up to the cloud. I really wanted to just re-activate the iPad instead of totally resetting it back to our default image.
    I reached out to my PLN on Twitter and had some help from a few people through retweets and a couple of clarification tweets. I love that so many are willing to help out so quickly. Through this I also learned that I look like Lt. Riker from Star Trek (thanks @FillineMachine).
    Through some trial and error (and a little sheer luck), I was able to reactivate the iPad without loosing any data. Note, this will only work on the computer it last synced with. Here’s how:
    1. Configurator is useless in reactivating a locked iPad. You will only be able to completely reformat the iPad using Configurator. If that’s ok with you, go for it – otherwise don’t waste your time trying to figure it out.
    2. Open iTunes with the iPad disconnected.
    3. Connect the iPad to the computer and wait for it to show up in the devices section in iTunes.
    4. Click on the iPad name when it appears and you will be given the option to restore a backup or setup as a new iPad (since it is locked).
    5. Click ‘Setup as new iPad’ and then click restore.
    6. The iPad will start backing up before it does the full restore and sync. CANCEL THE BACKUP IMMEDIATELY. You do this by clicking the small x in the status window in iTunes.
    7. When the backup cancels, it immediately starts syncing – cancel this as well using the same small x in the iTunes status window.
    8. The first stage in the restore process unlocks the iPad, you are basically just canceling out the restore process as soon as it reactivates the iPad.
    If done correctly, you will experience no data loss and the result will be a reactivated iPad. I have now tried this with about 5 iPads that were locked identically by students and each time it worked like a charm.
    ~~~~~~~~~~~~~
    Try it and good luck. You have nothing more to lose if it doesn't work for you.
     Cheers, Tom

Maybe you are looking for

  • How to restore after disk replacement?

    l just had my iMac hard disk replaced due a recall.  Before taking it in I made a disk image with disk Utility and securely erased the disk.  I also have Time Machine back-ups going back several months.  On getting the machine back, since it contains

  • Is there a way to NOT allow Safari History to be cleared?

    Is there a way to stop someone, "my children", from erasing the history of the websites they have been on so that I can monitor where they are on the web. I'm not so interested in parental controls because they limit so many places that they need to

  • Where Clause - Modification via SDK

    Good morning, We are currently experiencing quite a large performance impact as our record selection formulas, and parameters are not hitting our database (in where clause) and therefore a large amount of data is being pulled back and then filtered o

  • XL reporter  - What is the formula for Comparing difference between 2 dates

    Hi, I would like to create an Ageing report in XL reporter for SAP business one.  Columns include 30 days, 60 days 90 days etc. What should be the formula for Column Selection for eg: 30 days? The logic is total the value if Today Date - Posting Date

  • Addictional content empty window in 10.1

    hello everyone, i just made a new clean installation of logic x on the new 10.1 version. Didn't text all the functionality yet but i immediately start with this problem: when i try to download addictional content the window is empty (black), doesn't