T3700G-28TQ
 
JetStream 28-Port Gigabit Stackable L3 Managed Switch CLI Guide 
 
219 
set itself automatically as ERROR-PORT when receiving BPDU packets with 
higher priority, in order to maintain the role of root bridge. To disable the Root 
Protect function, please use no spanning-tree guard root command. 
Syntax 
spanning-tree guard root 
no spanning-tree guard root 
Command Mode 
Interface Configuration Mode (interface fastEthernet / interface range 
fastEthernet / interface gigabitEthernet / interface range gigabitEthernet/ 
interface ten-gigabitEthernet / interface range ten-gigabitEthernet) 
Example 
Enable the Root Protect function for Gigabit Ethernet port 1/0/2: 
T3700G-28TQ(config)#interface gigabitEthernet 1/0/2 
T3700G-28TQ(config-if)#spanning-tree guard root 
spanning-tree guard tc 
Description 
The  spanning-tree guard tc command is used to enable the TC Protect of 
Spanning Tree function for a port. To disable the TC Protect of Spanning Tree 
function, please use no spanning-tree guard tc command. A switch removes 
MAC address entries upon receiving TC-BPDUs. If a malicious user 
continuously sends TC-BPDUs to a switch, the switch will be busy with 
removing MAC address entries, which may decrease the performance and 
stability of the network. With the Protect of Spanning Tree function enabled, you 
can configure the number of TC-BPDUs in a required time, so as to avoid the 
process of removing MAC addresses frequently. 
Syntax 
spanning-tree guard tc 
no spanning-tree guard tc 
Command Mode 
Interface Configuration Mode (interface fastEthernet / interface range 
fastEthernet / interface gigabitEthernet / interface range gigabitEthernet / 
interface ten-gigabitEthernet / interface range ten-gigabitEthernet)