Configuration Guide     242
Configuring Spanning Tree STP Security Configurations
Interface    BPDU-Filter    BPDU-Guard      Loop-Protect    Root-Protect     TC-Protect
----------     -----------         ---------------     ------------            ------------          ---------
Gi1/0/3       Enable              Enable                   Enable                   Enable                 Disable
Switch(config-if)#end
Switch#copy running-config startup-config
4.2.1  Configuring the TC Protect
Follow these steps to configure TC protect feature for ports:
Step 1 configure
Enter global configuration mode.
Step 2 spanning-tree tc-defend threshold 
threshold
 period 
period
(Except T1600G-18TS) Configure the threshold and cycle of TC protect globally.
threshold: 
Specify the TC threshold, the valid values ranges from 1 to 100 packets. By default, 
it is 20. TC threshold is the maximum number of the TC-BPDUs received by the switch in a TC 
protect cycle.
pri: 
Specify the TC protect cycle, the valid values ranges from 1 to 10 in seconds. By default, it 
is 5. 
Step 3 interface {
 
fastEthernet 
port 
| gigabitEthernet 
port 
| range gigabitEthernet 
port-list
] [port-
channel 
port-channel
 | range port-channel 
port-channel-list
}
Enter interface configuration mode.
Step 4 spanning-tree guard tc
Enable the TC Protect function on the port.
TC Protect is to prevent the decrease of the performance and stability of the switch brought 
by continuously removing MAC address entries upon receiving TC-BPDUs in the network.
Step 5 show spanning-tree interface-security [ fastEthernet 
port 
| gigabitEthernet 
port 
| port-
channel 
lagid 
] [ bpdufilter | bpduguard | loop | root | tc | tc-defend ]
(Optional) View the protect information of  ports.
port: 
Specify the port number.
lagid: 
Specify the ID of the LAG.
Step 6 end
Return to privileged EXEC mode. 
Step 7 copy running-config startup-config
Save the settings in the configuration file.
This example shows how to enable the TC Protect function on port 1/0/3 with the TC 
threshold is 25 and the TC Protect Cycle is 8 (demonstrated with T1600G-52TS):
Switch#configure