Configuring Guard Functions 175
the maximum times for a switch to remove the MAC address table and ARP
entries to 100 and the switch receives 200 TC-BPDUs in the period, the switch
removes the MAC address table and ARP entries for only 100 times within the
period.
Configuration
Prerequisites
MSTP runs normally on the switch.
Configuring BPDU Guard Configuration procedure
Configuration example
# Enable the BPDU guard function.
<4210> system-view
[4210] stp bpdu-protection
Configuring Root Guard Configuration procedure
Configuration example
# Enable the root guard function on Ethernet 1/0/1.
1 Perform this configuration in system view
<4210> system-view
[4210] stp interface Ethernet1/0/1 root-protection
2 Perform this configuration in Ethernet port view
Tab le 130 Configure BPDU guard
Operation Command Description
Enter system view system-view -
Enable the BPDU guard
function
stp bpdu-protection Required
The BPDU guard function is
disabled by default.
Tab le 131 Configure the root guard function in system view
Operation Command Description
Enter system view system-view -
Enable the root guard
function on specified ports
stp interface interface-list
root-protection
Required
The root guard function is
disabled by default.
Tab le 132 Enable the root guard function in Ethernet port view
Operation Command Description
Enter system view system-view -
Enter Ethernet port view interface interface-type
interface-number
-
Enable the root guard
function on the current port
stp root-protection Required
The root guard function is
disabled by default.