H3C S3100 8C SI - Configuring Loop Guard; Configuring TC-BPDU Attack Guard

Operation Manual – MSTP
H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration
1-47
[Sysname-Ethernet1/0/1] stp root-protection
1.6.5 Configuring Loop Guard
I. Configuration procedure
Table 1-39 Configure loop guard
Operation Command Description
Enter system view
system-view
—
Enter Ethernet port view
interface interface-type
interface-number
—
Enable the loop guard
function on the current
port
stp loop-protection
Required
The loop guard function is
disabled by default.
II. Configuration example
# Enable the loop guard function on Ethernet 1/0/1.
<Sysname> system-view
[Sysname] interface Ethernet1/0/1
[Sysname-Ethernet1/0/1] stp loop-protection
1.6.6 Configuring TC-BPDU Attack Guard
I. Configuration prerequisites
MSTP runs normally on the switch.
II. Configuration procedure
Table 1-40 Configure the TC-BPDU attack guard function
Operation Command Description
Enter system view
system-view
—
Enable the TC-BPDU
attack guard function
stp tc-protection enable
Required
The TC-BPDU attack
guard function is disabled
by default.
Set the maximum times
that a switch can remove
the MAC address table
within each 10 seconds
stp tc-protection
threshold number
Optional