11-37
Default Level
2: System level
Parameters
None
Description
Use the stp root-protection command to enable the root guard function on the port(s).
Use the undo stp root-protection command to restore the default.
By default, the root guard function is disabled.
Configured in Layer 2 Ethernet interface view, the setting takes effect on the current interface only.
Configured in port group view, the setting takes effect on all ports in the port group. Configured in Layer
2 aggregate interface view, the setting takes effect only on the aggregate interface. Configured on the
member port in an aggregation group, the setting can take effect only after the port leaves the
aggregation group.
Among loop guard, root guard and edge port settings, only one function (whichever is configured the
earliest) can take effect on a port at the same time.
Related commands: stp edged-port and stp loop-protection.
Examples
# Enable the root guard function for GigabitEthernet 2/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/0/1
[Sysname-GigabitEthernet2/0/1] stp root-protection
stp tc-protection
Syntax
stp tc-protection enable
stp tc-protection disable
View
System view
Default Level
2: System level
Parameters
None
Description
Use the stp tc-protection enable command to enable the TC-BPDU attack guard function for the
device.
Use the stp tc-protection disable command to disable the TC-BPDU attack guard function for the
device.
By default, the TC-BPDU attack guard function is enabled.
To Next Page
Loading...
Need help?
General
