Configuration Guide 242
Configuring Spanning Tree STP Security Configurations
Interface BPDU-Filter BPDU-Guard Loop-Protect Root-Protect TC-Protect
---------- ----------- --------------- ------------ ------------ ---------
Gi1/0/3 Enable Enable Enable Enable Disable
Switch(config-if)#end
Switch#copy running-config startup-config
4.2.1 Configuring the TC Protect
Follow these steps to configure TC protect feature for ports:
Step 1 configure
Enter global configuration mode.
Step 2 spanning-tree tc-defend threshold
threshold
period
period
(Except T1600G-18TS) Configure the threshold and cycle of TC protect globally.
threshold:
Specify the TC threshold, the valid values ranges from 1 to 100 packets. By default,
it is 20. TC threshold is the maximum number of the TC-BPDUs received by the switch in a TC
protect cycle.
pri:
Specify the TC protect cycle, the valid values ranges from 1 to 10 in seconds. By default, it
is 5.
Step 3 interface {
fastEthernet
port
| gigabitEthernet
port
| range gigabitEthernet
port-list
] [port-
channel
port-channel
| range port-channel
port-channel-list
}
Enter interface configuration mode.
Step 4 spanning-tree guard tc
Enable the TC Protect function on the port.
TC Protect is to prevent the decrease of the performance and stability of the switch brought
by continuously removing MAC address entries upon receiving TC-BPDUs in the network.
Step 5 show spanning-tree interface-security [ fastEthernet
port
| gigabitEthernet
port
| port-
channel
lagid
] [ bpdufilter | bpduguard | loop | root | tc | tc-defend ]
(Optional) View the protect information of ports.
port:
Specify the port number.
lagid:
Specify the ID of the LAG.
Step 6 end
Return to privileged EXEC mode.
Step 7 copy running-config startup-config
Save the settings in the configuration file.
This example shows how to enable the TC Protect function on port 1/0/3 with the TC
threshold is 25 and the TC Protect Cycle is 8 (demonstrated with T1600G-52TS):
Switch#configure
To Next Page
Loading...
Need help?
General