Huawei Quidway S3000-EI Series User Manual

Operation Manual - STP
Quidway S3000-EI Series Ethernet Switches Chapter 1
MSTP Region-configuration
Huawei Technologies Proprietary
1-25
and congestion will occur on the
network. Root p ction is used against such pro
III.
he root port and other blocked ports maintain their state according to the BPDUs send
ked or has trouble, then the ports cannot receive
port again. In this case, the former root port will
nter forwarding state, as a
result, a link loop will be generated.
loop. After it is enabled, the root
port cannot be c blocked port will maintain in “D ate and do not
forward
IV. TC-protection
ackets in a
When the protection from TC-BPDU packet attack is enabled, the switch just perform
ceiving TC-BPDU packets, as well as
monitoring whether it receives TC-BPDU packets during this period. Even if it detects a
te operation till the specified interval is reached. This can avoid
s to the MAC address table and ARP table.
You can use the following command to configure the security functions of the switch.
high-speed link may be pulled to the low-speed link
rotection fun blem.
loop protection
T
by uplink switch. Once the link is bloc
BPDUs and the switch will select root
turn into specified port and the former blocked ports will e
The security functions can control the generation of
hanged, the iscarding” st
packets, thus to avoid link loop.
As a general rule, the switch deletes the corresponding entries in the MAC address
table and ARP table upon receiving TC-BPDU packets. When under malicious attacks
of TC-BPDU packets, the switch shall receive a great number of TC-BPDU p
very short period. Too frequent delete operations shall consume huge switch sources
and bring great risk to network stability.
one delete operation in a specified period after re
TC-BPDU packet is received in a period shorter than the specified interval, the switch
shall not run the dele
frequent delete operation
Perform the following configuration in corresponding configuration modes.
Table 1-22 Configure the switch security function
Operation Command
Configure switch BPDU protection (from system
view)
stp bpdu-protection
Restore the disabled BPDU protection state as
defaulted (from system view)
undo stp bpdu-protection
Configure switch Root protection (from system
view)
stp interface interface-list
root-protection
Restore the disabled Root protection state as
defaulted (from system view)
undo stp interface
interface-list root-protection
Configure switch Root protection (from Ethernet
port view)
stp root-protection

Huawei Quidway S3000-EI Series Specifications

General

Brand	Huawei
Model	Quidway S3000-EI Series
Category	Switch
Language	English