# Cisco Portfast Configuration

**URL:** https://forum.networklessons.com/t/cisco-portfast-configuration/1122
**Category:** Lessons Discussion
**Created:** [December 27, 2016, 4:02pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122 "2016-12-27T16:02:21Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [December 27, 2016, 4:02pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/1 "2016-12-27T16:02:21Z")

</div>

This topic is to discuss the following lesson:

> **[Cisco Portfast Configuration](https://networklessons.com/spanning-tree/cisco-portfast-configuration)**
>
> This lesson explains why we need Portfast and how to configure it on Cisco Catalyst Switches.

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [September 10, 2014, 2:53am UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/2 "2014-09-10T02:53:49Z")

</div>

Your articles are so useful, it totally saved me.  
It’s a pleasure to read a text so well detailed and clear, you went straight to the point and also used a very interesting methodology to keep our focus in the subject.

Thank you

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [September 10, 2014, 10:23pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/3 "2014-09-10T22:23:26Z")

</div>

Rene,

Do you make any labs in packet tracer?

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [September 11, 2014, 10:18am UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/4 "2014-09-11T10:18:18Z")

</div>

Hi Vik,

The labs on GNS3Vault were created in GNS3, I haven’t created anything in packet tracer but it should be simple to recreate. Nowadays people use GNS3, IOU, packet tracer, the 1000v VMware image and real hardware. It takes too much time to create a startup config for any possible method.

Rene

---

<div class="post-metadata">

### Author: ![gabrielba](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/g/e79b87/32.png) [@gabrielba](https://forum.networklessons.com/u/gabrielba)
#### Post date: [October 4, 2015, 4:12am UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/5 "2015-10-04T04:12:18Z")

</div>

Rene,

Thanks for this explanation 🙂

Hugs

---

<div class="post-metadata">

### Author: ![willveld](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/w/2bfe46/32.png) [@willveld](https://forum.networklessons.com/u/willveld)
#### Post date: [March 18, 2016, 3:42pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/6 "2016-03-18T15:42:08Z")

</div>

Rene

Hop you are well - do you know at all if the current CCNA blueprint / exam covers any other additional spanning tree enhancement features besides Portfast such as UDLD , Backbonefast, Uplinkfast - I ask since after searching the current blueprint there is not reference or doesn’t seem to be to any of these

Many thanks in advance

Will

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [March 18, 2016, 5:22pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/7 "2016-03-18T17:22:42Z")

</div>

Hi Will,

Backbonefast, Uplinkfast and UDL are on the CCNP SWITCH blueprint so I don’t expect to see those on the CCNA exam(s). They aren’t on the CCNA blueprint.

Portfast is something you should practice though 🙂

Rene

---

<div class="post-metadata">

### Author: ![artfabre88](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/8e7dd6/32.png) [@artfabre88](https://forum.networklessons.com/u/artfabre88)
#### Post date: [March 30, 2016, 2:55pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/8 "2016-03-30T14:55:43Z")

</div>

Very clear and easy to understand. Great job 🙂

---

<div class="post-metadata">

### Author: ![Zaman.rubd](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/z/45deac/32.png) [@Zaman.rubd](https://forum.networklessons.com/u/Zaman.rubd)
#### Post date: [April 28, 2016, 10:02pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/9 "2016-04-28T22:02:43Z")

</div>

Thanks dear 🙂

---

<div class="post-metadata">

### Author: ![chandru.tkc](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/c/34f0e0/32.png) [@chandru.tkc](https://forum.networklessons.com/u/chandru.tkc)
#### Post date: [May 29, 2016, 10:49pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/10 "2016-05-29T22:49:41Z")

</div>

Hi Rene,  
What happens when Portfast is enabled on a port but BPDU filter is not globally enabled and the port receives a BPDU.

Thanks,

---

<div class="post-metadata">

### Author: ![andrew](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/andrew/32/645_2.png) [@andrew](https://forum.networklessons.com/u/andrew)
#### Post date: [May 30, 2016, 1:50am UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/11 "2016-05-30T01:50:18Z")

</div>

Chandru,  
The port will lose its portfast status, and will continue to function like a normal port (without Portfast). It will not be disabled unless BPDU Guard was also enabled.

FYI: Rene has a [Lesson related to this topic here](https://networklessons.com/topic/does-portfast-disable-spanning-tree/)

---

<div class="post-metadata">

### Author: ![chandru.tkc](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/c/34f0e0/32.png) [@chandru.tkc](https://forum.networklessons.com/u/chandru.tkc)
#### Post date: [May 31, 2016, 12:14pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/12 "2016-05-31T12:14:43Z")

</div>

Thanks Andrew. I have one more question, What is the real use of BPDU filter command in a Global mode, if a normal portfast can achieve the same functionality. Why do we need to enable BPDU filter at the global level and what enhancement does it provide at the global level. BPDU filter lesson says.

BPDUfilter can be configured globally or on the interface level and there’s a difference:

Global: if you enable BPDUfilter globally then any interface with portfast enabled will not send or receive any BPDUs. When you receive a BPDU on a portfast enabled interface then it will lose its portfast status, disables BPDU filtering and acts as a normal interface.

---

<div class="post-metadata">

### Author: ![andrew](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/andrew/32/645_2.png) [@andrew](https://forum.networklessons.com/u/andrew)
#### Post date: [May 31, 2016, 5:22pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/13 "2016-05-31T17:22:01Z")

</div>

Chandru,  
BPDUFilter Global and Portfast serve very different purposes:

The most important thing that portfast does is define which ports should be ignored for spanning-tree re-convergence events. In other words, you want to make sure your access-level ports, where people might be plugging/unplugging their devices all the time, will not cause the entire spanning-tree topology run its STP calculation every time an event occurs. Secondarily, it tells the port in question to skip the listening/learning and go straight to forwarding.

One thing that PortFast does NOT do is prevent the sending of BPDUs–only BPDU Filtering does that.

When running BPDUFilter, you should do so only at the global level. The reason is at the global level it has a built in protection mechanism where if a BPDU is received on a port that has global filtering enabled, this port will fall back to being a “normal” port that sends/receives BPDUs. This protection is not present when enabling filtering on a per port basis which may result in a layer 2 loop (broadcast storm).

---

<div class="post-metadata">

### Author: ![chandru.tkc](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/c/34f0e0/32.png) [@chandru.tkc](https://forum.networklessons.com/u/chandru.tkc)
#### Post date: [June 1, 2016, 7:11am UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/14 "2016-06-01T07:11:57Z")

</div>

Thanks Andrew. Now i can understand completely. I misunderstood that portfast will not send BPDU’s.

---

<div class="post-metadata">

### Author: ![bossid1999](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/b/ed8c4c/32.png) [@bossid1999](https://forum.networklessons.com/u/bossid1999)
#### Post date: [June 22, 2016, 6:23pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/15 "2016-06-22T18:23:06Z")

</div>

Hi Rene,

What happen if the port enables portfast is to be part of the loop ?  
The port is going to be blocked or not?

Thank you  
Boss

---

<div class="post-metadata">

### Author: ![andrew](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/andrew/32/645_2.png) [@andrew](https://forum.networklessons.com/u/andrew)
#### Post date: [June 23, 2016, 6:00pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/16 "2016-06-23T18:00:23Z")

</div>

Nuttawut,  
PortFast does not stop the port from sending BPDUs. Therefore, if a port that became part of a loop had PortFast enabled would detect this, and the port would lose its PortFast state and return to normal spanning-tree operations. This assumes the other end of the connection cause the loop does not have BPDU Filtering enabled, which would block that side from sending BPDUs.

---

<div class="post-metadata">

### Author: ![romishra1976](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/r/c89c15/32.png) [@romishra1976](https://forum.networklessons.com/u/romishra1976)
#### Post date: [September 6, 2016, 11:42am UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/17 "2016-09-06T11:42:01Z")

</div>

Hi Rene,

It means Portfast enabled interface still sends and recevies BPDU.  
what happens when We configure BPDU filter ?

---

<div class="post-metadata">

### Author: ![andrew](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/andrew/32/645_2.png) [@andrew](https://forum.networklessons.com/u/andrew)
#### Post date: [September 6, 2016, 5:45pm UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/18 "2016-09-06T17:45:35Z")

</div>

Rohitendu,  
There are actually two modes of BPDU Filter: Per port (dangerous) and globally.

In the port mode, the switch will not send or receive BPDUs (which essentially disables the STP process) on the port in question. Configuring BPDU Filtering in port mode would prevent the switch from detecting a loop involving the port where it is enabled. This is why this option is considered dangerous and is generally avoided.

In global mode, this command is paired with portfast as follows:

```auto
switch(config)#spanning-tree portfast bpdufilter default
switch(config)#spanning-tree portfast default

```

This prevents interfaces in portfast mode from sending BPDUs. However, if a BPDU is received on such an interface, the interface will lose its PortFast state, and outgoing BPDU filtering is disabled.

---

<div class="post-metadata">

### Author: ![Harleen](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/h/b19c9b/32.png) [@Harleen](https://forum.networklessons.com/u/Harleen)
#### Post date: [October 22, 2018, 9:56am UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/19 "2018-10-22T09:56:50Z")

</div>

As on different threads and post see that Don’t enable portfast on an interface to another hub or switch. If you enable Port Fast on a port connected to a switch (a network port), you might create a temporary bridging loop…  
My question is how bridging loops will be created as when port on which portfast is enabled receives the bpdu, then that port losses its portfast status and start working like a normal port. then how loops are going to create.

My second questions is that can we enable portfast on the trunks.?

and also, does portfast enabled port immediately transition to blocking state if they receive the superior BPDU.?

If, I understand correctly then portfast enabled port towards the host sends only BPDUs and do not receive BPDUS and if we enable Portfast on the interface or port that is connected to another switch then that port will receive the BPDUs from the root switch and when that port receives the BPDUs, the port immediately losses its port fast status and become normal port. Please let me know if this statement is correct about portfast.

---

<div class="post-metadata">

### Author: ![swapnilkshirsagar08](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/s/e47774/32.png) [@swapnilkshirsagar08](https://forum.networklessons.com/u/swapnilkshirsagar08)
#### Post date: [October 24, 2018, 7:46am UTC](https://forum.networklessons.com/t/cisco-portfast-configuration/1122/20 "2018-10-24T07:46:06Z")

</div>

Hello Rene,

If one port on switch is configured as portfast, and accidentally someone connected another switch on that port ..what will happen.. what will be impact? .. because I think it is recommended that portfast enbaled ports must be connected to host devices.  
Please reply.

Thanks,  
Swapnil

[Next page](https://forum.networklessons.com/t/cisco-portfast-configuration/1122.md?page=2)
