How do you configure spanning tree port fast bpdu root guard on cisco 3560 switch? Can anyone tell me if there's any difference in the configuration of stp port fast bpdu root guard in cisco 3560 and 2960 switches?
spanning-tree portfast, and
spanning-tree bpduguard enable on each switchport. Root guard is unnecessary on ports with this configuration, because bpduguard will err-disable the port when you receive any bpdus.
Use root guard on links to other switches, which are not planned for the primary or secondary stp root role.
As an aside and since I cannot leave comments yet, I prefer to use
switchport host when setting up access ports. The
switchport host command is a macro on all Cisco switches. it sets the port up as an accessport, spanning-tree portfast, and disables etherchannel capabilities.
Once you've used the
switchport host command your can then run whatever additional commands are needed such as
spanning-tree bpduguard enable or
spanning-tree bpduguard enable.