HP FlexFabric 12900 series Troubleshooting Manual page 18

Question
Does a TC attack exist to
cause frequent STP status
changes on any ports?
VRRP
Is the handshake interval
correctly set?
Are the handshake intervals
of the two ends the same?
ARP
Are there ARP conflicts?
OSPF
Command or method
display stp tc
display stp history
display vrrp
display logbuffer
14
Result Remarks
Examine the following items
in the command output for
TC attacks:
•
Incoming and outgoing
TC/TCN BPDU statistics.
•
Historical port role
calculation information.
There is a risk of TC attack if
frequent STP status changes
occur on a stable network.
Make sure you have
configured the following
□OK
settings:
□Not OK
•
Configure ports
□Not related
connected to end-user
devices as edge ports,
and enable BPDU
guard. Alternatively,
disable the spanning
tree feature on the ports.
•
Disable the spanning
tree feature on ports
connected to devices
that do not support
spanning tree protocols.
•
Do not disable TC-BPDU
guard.
Change the handshake
interval to 3 seconds if the
number of VRRP groups is
less than five.
□OK
If five or more VRRP groups
□Not OK
exist, assign three or five
VRRP groups into one
□Not related
group, and configure the
handshake interval as 3
seconds, 5 seconds, and 7
seconds for each group.
If the log contains ARP
□OK
conflict records, verify that
□Not OK
the hosts in conflict are
legitimate, and remove the
□Not related
conflicts.