SpanningÊTreeÊConfigura on:ÊPortFastÊandÊBPDUÊGuard

The spanning-tree portfast bpduguard default global configuration command enables BPDU guard on all
PortFast-enabled ports

SW5(config)#spanning-tree por ast default show spanning-tree int fa0/23 por ast
SW5(config)# spanning-tree portfast bpduguard default show spanning-tree int fa0/23
BPDUÊguardÊonÊinterface: show spanning-tree summary
SW4(config-if)#spanning-tree por ast show spanning-tree ac ve

SW4(config-if)#spanning-tree bpduguard enable show mac-address-table

show port-security int fa0/2
SwitchÊPortÊsecurity:
show port-security address
Switch(config-if-range)#interface range fa0/1-2
Switch(config-if)#switchport mode access
Switch(config-if)#switchport port-security
Switch(config-if)#switchport port-security mac-address s cky
Switch(config-if)#switchport port-security viola on shutdown
Switch(config-if)#switchport port-security maximum 1

The side that trunks (SW1 in this case) enables trunking using the
command switchportÊmodeÊtrunk but also disables Dynamic
Trunking Protocol (DTP) nego a ons using the
switchportÊnonego ate command.