Configuring PortFast – STP Attack Defense

Only enable PortFast on access ports

PortFast on inter switch links can create a spanning-tree loop

On an interface – Use the 

spanning-tree portfast 

interface configuration command

Globally – Use the 

spanning-tree portfast default 

global configuration command to enable PortFast on all access ports