TP-Link T1600G-18TS Configuration Manual page 264

Configuring Spanning Tree
Step 4 spanning-tree guard root
(Optional) Enable the Root Protect function on the port. It is recommended to enable this
function on the designated ports of the root bridge.
Root Protect function is used to ensure that the desired root bridge will not lose its position.
With root protect function enabled, the port will temporarily transit to blocking state when it
receives higher-priority BDPUs. After two times of forward delay, if the port does not receive
any higher-priority BDPUs, it will transit to its normal state.
Step 5 spanning-tree bpdufilter
(Optional) Enable the BPDU Filter function on the port. It is It is recommended to enable this
function on edge ports.
BPDU filter function is to prevent BPDU flooding in the network. With BPDU filter function
enabled, the port does not receive or forward BPDUs, but it sends out its own BPDUs,
preventing the switch from being attacked by BPDUs.
Step 6 spanning-tree bpduguard
(Optional) Enable the BPDU Protect function on the port. It is It is recommended to enable this
function on edge ports.
BPDU Protect function is used to prevent the edge port from receiving BPUDs. With BPDU
protect function enabled, the edge port will be shutdown when it receives BPDUs, and reports
these cases to the administrator. Only the administrator can restore it..
Step 7 show spanning-tree interface-security [ gigabitEthernet port | port-channel
l agid ] [ bpdufilter | bpduguard | loop | root | tc | tc-defend ]
(Optional) View the protect inforamtion of ports.
port:
lagid:
Step 8 end
Return to privileged EXEC mode.
Step 9 copy running-config startup-config
Save the settings in the configuration file.
This example shows how to enable Loop Protect, Root Protect, BPDU Filter and BPDU
Protect functions on port 1/0/3:
Switch#configure
Switch(config)#interface gigabitEthernet 1/0/3
Switch(config-if)#spanning-tree guard loop
Switch(config-if)#spanning-tree guard root
Switch(config-if)#spanning-tree bpdufilter
Switch(config-if)#spanning-tree bpduguard
Switch(config-if)#show spanning-tree interface-security gigabitEthernet 1/0/3
Specify the port number.
Specify the ID of the LAG.
STP Security Configurations
Configuration Guide 241