Stp Security - TP-Link TL-SL3428 User Manual

Pqvg<"
The port status of one port in different spanning tree instances can be different.
Global configuration Procedure for Spanning Tree function:
Uvgr" Qrgtcvkqp"
1 Make clear roles the switches
play in
instances: root
designated bridge
2 Globally configure
parameters
3 Configure MSTP parameters
for ports
4 Configure the MST region
5 Configure MSTP parameters
for instance ports
906" UVR"Ugewtkv{"
Configuring protection function for devices can prevent devices from any malicious attack against
STP features. The STP Security function can be implemented on Rqtv"Rtqvgev and VE"Rtqvgev
pages.
Port Protect function is to prevent the devices from any malicious attack against STP features.
90603"Rqtv"Rtqvgev"
On this page you can configure loop protect feature, root protect feature, TC protect feature,
BPDU protect feature and BPDU filter feature for ports. You are suggested to enable
corresponding protection feature for the qualified ports.
Nqqr"Rtqvgev"
"
In a stable network, a switch maintains the states of ports by receiving and processing BPDU
packets from the upstream switch. However, when link congestions or link failures occurred to the
network, a downstream switch does not receive BPDU packets for certain period, which results in
spanning trees being regenerated and roles of ports being reselected, and causes the blocked
ports to transit to forwarding state. Therefore, loops may be incurred in the network.
The loop protect function can suppresses loops. With this function enabled, a port, regardless of
the role it plays in instances, is always set to blocking state, when the port does not receive BPDU
packets from the upstream switch and spanning trees are regenerated, and thereby loops can be
prevented.
Fguetkrvkqp"
Preparation.
spanning tree
bridge or
MSTP Required." Enable Spanning Tree function on the switch
and
Vtgg→UVR"Eqphki→UVR"Eqphki page.
Required. Configure MSTP parameters for ports on
Urcppkpi"Vtgg→Rqtv"Eqphki→Rqtv"Eqphki page.
Required. Create MST region and configure the role the
switch
Vtgg→OUVR" Kpuvcpeg→Tgikqp" Eqphki" and" Kpuvcpeg"
Eqphki page.
Optional. Configure different instances in the MST region
and configure MSTP parameters for instance ports on
Urcppkpi"
Eqphki page.
configure MSTP
plays in the MST
Vtgg→OUVR" Kpuvcpeg→Kpuvcpeg" Rqtv"
84
parameters on
Urcppkpi"
region on
Urcppkpi"