Digest Snooping Configuration - Huawei Quidway S5600 Series Operation Manual

Operation Manual – MSTP
Quidway S5600 Series Ethernet Switches-Release 1510
1.5.6 TC-BPDU Attack Prevention Configuration
I. Configuration procedure
Table 1-34 Enable the TC-BPDU attack prevention function
Operation
Enter system view
Enable
TC-BPDU
prevention function
II. Configuration example
# Enable the TC-BPDU attack prevention function
<Quidway> system-view
[Quidway] stp tc-protection enable
1.5.7 BPDU Packets Drop Configuration
Table 1-35 BPDU packets drop configuration procedure
Operation
Enter system view
Enter Ethernet port
view
Enable the BPDU
packets
function
Ethernet port view
# Enable the BPDU packets drop function on GigabitEthernet1/0/1
<Quidway>system-view
[Quidway] interface GigabitEthernet 1/0/1
[Quidway-GigabitEthernet1/0/1] bpdu-drop any

1.6 Digest Snooping Configuration

1.6.1 Introduction
According to IEEE 802.1s, two interconnected MSTP switches can interwork with each
other through MSTIs in an MST region only when the two switches have the same MST
region-related configuration. Interconnected MSTP switches determine whether or not
they are in the same MST region by checking the configuration IDs of the BPDUs
Command
system-view
the
attack
stp tc-protection enable
Command
system - view
interface interface-name
drop
bpdu-drop any
in
Huawei Technologies Proprietary
1-36
Chapter 1 MSTP Configuration
Description
—
Required
The TC-BPDU
prevention function
disabled by default.
Description
—
—
Required
attack
is