Configuring Bpdu Protection On A Switching Device; Configuring Tc Protection On A Switching Device - Huawei Quidway S7700 Configuration Manual - Ethernet

Quidway S7700 Smart Routing Switch
Configuration Guide - Ethernet
Data Preparation
To configure MSTP protection functions on a switching device, you need the following data.
No.
1
2

9.5.2 Configuring BPDU Protection on a Switching Device

After BPDU protection is enabled on a switching device, the switching device shuts down an
edge port if the edge port receives a BPDU, and notifies the NMS of the shutdown event.
Context
Edge ports are directly connected to user terminals and normally, the edge ports will not receive
BPDUs. Some attackers may send pseudo BPDUs to attach the switching device. If the edge
ports receive the BPDUs, the switching device automatically sets the edge ports as non-edge
ports and triggers new spanning tree calculation. Network flapping then occurs. BPDU
protection can be used to protect switching devices against network attacks.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
stp bpdu-protection
BPDU protection is enabled on the switching device.
By default, BPDU protection is not enabled on the switching device.
----End

9.5.3 Configuring TC Protection on a Switching Device

After TC protection is enabled, you can set the number of times for an MSTP process to process
TC-BPDUs within a given time. TC protection avoids frequent deletion of MAC address entries
and ARP entries, thereby protecting switching devices.
Issue 01 (2011-07-15)
NOTE
Configuring an edge port on the switching device before configuring BPDU protection.
Data
Number of the port on which root protection is to be enabled
Number of the port on which loop protection is to be enabled
NOTE
Do as follows on a switching device having an edge port:
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 MSTP Configuration
450