CCNP Encor RSTP

---

Hi Team,

Quick question.

Assuming we are running RSTP on a access layer switch. What are best practices when running bpdugaurd + bpdufilter on an access port that has portfast configured?

The intended goal is to have bpdugaurd enabled on an access port running portfast and have the port not send any BPDUs out its interface.

What are best practices for this scenario? is it recommended to run bpdugaurd + bpdufilter simultaneously? will this cause any issue?

Thanks,
Manuel

Hi Manuel!

Thanks for using our forum! What an awesome question. The Enterprise best practice is to use PortFast where appropriate at your access layer and to use BPDUGuard. It is NOT common for an Enterprise to use BPDUFilter. In fact, many engineers avoid this since when used in certain combinations with other RSTP features, you can easily cause a loop. This is because BPDUs are being received and they are being ignored.

From an exam perspective, I do not recall anything covered outside of PortFast. Great job having yourself prepared just in case!

@Anthony-Sequeira Thank you for the explanation and insight!