Configuring Bpdu Protection On A Switching Device - Huawei Quidway S7700 Configuration Manual - Ethernet

Quidway S7700 Smart Routing Switch
Configuration Guide - Ethernet
l
Data Preparation
To configure basic RSTP functions, you need the following data.
No.
1
2

8.4.2 Configuring BPDU Protection on a Switching Device

After BPDU protection is enabled on a switching device, the switching device shuts down an
edge port if the edge port receives a BPDU, and notifies the NMS of the shutdown event.
Context
Edge ports are directly connected to user terminals and normally, the edge ports will not receive
BPDUs. Some attackers may send pseudo BPDUs to attach the switching device. If the edge
ports receive the BPDUs, the switching device automatically configures the edge ports as non-
edge ports and triggers new spanning tree calculation. Network flapping then occurs. BPDU
protection can be used to protect switching devices against malicious attacks.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
stp bpdu-protection
BPDU protection is enabled on the switching device.
By default, BPDU protection is not enabled on the switching device.
----End
Follow-up Procedure
To allow an edge port to automatically start after being shut down, you can run the error-down
auto-recovery cause cause-item interval interval-value command to configure the auto
recovery function and set the delay on the port. After the delay expires, the port automatically
goes Up. interval interval-value ranges from 30 to 86400, in seconds. Note the following when
setting this parameter:
Issue 01 (2011-07-15)
Configuring basic RSTP functions
NOTE
Configuring an edge port on the switching device before configuring BPDU protection.
Data
Number of the port on which root protection is to be enabled
Number of the port on which loop protection is to be enabled
NOTE
Do as follows on a switching device having an edge port:
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 STP/RSTP Configuration
402