Configuration Guide 240
Configuring Spanning Tree STP Security Configurations
When you enable TC Protect function on ports, set the TC threshold and TC Protect Cycle
here. If the number of the received TC-BPDUs exceeds the maximum number you set in the
TC threshold field, the switch will not remove MAC address entries in the TC protect cycle.
Choose the menu Spanning Tree > STP Security > TC Protect to load the following page.
Figure 4-2 Configuring the TC Protect
Configure the parameters of TC Protect feature, and click Apply.
TC Threshold Enter a number from 1 to 100, and the default value is 20. It is the maximum
number of the TC-BPDUs received by the switch in a TC Protect Cycle.
TC Protect Cycle Enter a value from 1 to 10 to specify the TC Protect Cycle. The default value is 5.
4.2 Using the CLI
4.2.1 Configuring the STP Security
Follow these steps to configure the Root protect feature, BPDU protect feature and BPDU
filter feature for ports:
Step 1 configure
Enter global configuration mode.
Step 2 interface {gigabitEthernet
port
| range gigabitEthernet
port-list
] [port-channel
port-channel
|
range port-channel
port-channel-list
}
Enter interface configuration mode.
Step 3 spanning-tree guard loop
(Optional) Enable the Loop Protect
feature
on the port. t is recommended to enable this
function on root ports and alternate ports.
Loop Protect function is used to prevent loops caused by link congestions or link failures. With
Loop Protect function enabled, the port will temporarily transit to blocking state when it does
not receive BPDUs. After the link restores to normal, the port will transit to its normal state, so
loops can be prevented.
To Next Page
Loading...
Need help?
General