176 CHAPTER 14: MSTP CONFIGURATION
<4210> system-view
[4210] interface Ethernet1/0/1
[4210-Ethernet1/0/1] stp root-protection
Configuring Loop Guard Configuration procedure
Configuration example
# Enable the loop guard function on Ethernet 1/0/1.
<4210> system-view
[4210] interface Ethernet1/0/1
[4210-Ethernet1/0/1] stp loop-protection
Configuring TC-BPDU
Attack Guard
Configuration prerequisites
MSTP runs normally on the switch.
Configuration procedure
Configuration example
# Enable the TC-BPDU attack guard function
<4210> system-view
[4210] stp tc-protection enable
# Set the maximum times for the switch to remove the MAC address table within
10 seconds to 5.
<4210> system-view
[4210] stp tc-protection threshold 5
Tabl e 133 Configure loop guard
Operation Command Description
Enter system view system-view -
Enter Ethernet port view interface interface-type
interface-number
-
Enable the loop guard
function on the current port
stp loop-protection Required
The loop guard function is
disabled by default.
Tabl e 134 Configure the TC-BPDU attack guard function
Operation Command Description
Enter system view system-view -
Enable the TC-BPDU attack
guard function
stp tc-protection enable Required
The TC-BPDU attack guard
function is disabled by
default.
Set the maximum times that a
switch can remove the MAC
address table within each 10
seconds
stp tc-protection threshold
number
Optional