Operation Manual - STP
Quidway S6500 Series Ethernet Switches Chapter 1 MSTP Region-configuration
Huawei Technologies Proprietary
1-27
very short period. Too frequent delete operations shall consume huge switch sources
and bring great risk to network stability.
When the protection from TC-BPDU packet attack is enabled, the switch just perform
one delete operation in a specified period after receiving TC-BPDU packets, as well as
monitoring whether it receives TC-BPDU packets during this period. Even if it detects a
TC-BPDU packet is received in a period shorter than the specified interval, the switch
shall not run the delete operation till the specified interval is reached. This can avoid
frequent delete operations to the MAC address table and ARP table.
You can use the following command to configure the security functions of the switch.
Perform the following configuration in corresponding configuration modes.
Table 1-25 Configure the switch security function
Operation Command
Configure switch BPDU protection (from system view)
stp bpdu-protection
Restore the disabled BPDU protection state as defaulted
(from system view)
undo stp
bpdu-protection
Configure switch Root protection (from system view)
stp interface
interface-list
root-protection
Restore the disabled Root protection state as defaulted
(from system view)
undo stp interface
interface-list
root-protection
Configure switch Root protection (from Ethernet port
view)
stp root-protection
Restore the disabled Root protection state as defaulted
(from Ethernet port view)
undo stp
root-protection
Configure switch loop protection function (from Ethernet
port view)
stp loop-protection
Restore the disabled loop protection state, as defaulted
(from Ethernet port view)
stp loop-protection
Configure switch TC protection (from system view)
stp tc-protection
enable
Disabled TC protection state as defaulted (from system
view)
stp tc-protection
disable
After configured with BPDU protection, the switch will disable the edge port through
MSTP, which receives a BPDU, and notify the network manager at same time. These
ports can be resumed by the network manager only.
The port configured with Root protection only plays a role of designated port on every
instance. Whenever such port receives a higher-priority BPDU, that is, it is about to turn
into non-designated port, it will be set to listening state and not forward packets any
To Next Page
Loading...
Need help?
General
