Displaying And Maintaining The Spanning Tree - HP 3600 v2 series Configuration Manual

NOTE:
HP does not recommend you disable this feature.
Enabling BPDU drop
In a spanning tree network, after receiving BPDUs, the device performs STP calculation according to the
received BPDUs and forwards received BPDUs to other devices in the network. This allows malicious
attackers to attack the network by forging BPDUs. By continuously sending forged BPDUs, they can make
all the devices in the network perform STP calculations all the time. As a result, problems such as CPU
overload and BPDU protocol status errors occur.
To avoid this problem, you can enable BPDU drop on ports. A BPDU drop-enabled port does not receive
any BPDUs and is invulnerable to forged BPDU attacks.
Follow these steps to enable BPDU drop on an Ethernet interface:
To do...
Enter system view
Enter Layer 2 Ethernet interface
view
Enable BPDU drop on the current
interface
NOTE:
Because a port with BPDU drop enabled also drops the received 802.1X packets, do not enable BPDU
drop and 802.1X on a port at the same time. For more information about 802.1X, see
Configuration Guide

Displaying and maintaining the spanning tree

To do...
Display information about ports blocked
by spanning tree protection functions
Display BPDU statistics on ports
Display information about ports shut
down by spanning tree protection
functions
Display the historical information of port
role calculation for the specified MSTI or
all MSTIs
Display the statistics of TC/TCN BPDUs
sent and received by all ports in the
specified MSTI or all MSTIs
Use the command...
system-view
interface interface-type
interface-number
bpdu-drop any
.
Use the command...
display stp abnormal-port [ | { begin |
exclude | include } regular-expression ]
display stp bpdu-statistics [ interface
interface-type interface-number [ instance
instance-id ] ] [ | { begin | exclude |
include } regular-expression ]
display stp down-port [ | { begin |
exclude | include } regular-expression ]
display stp [ instance instance-id | vlan
vlan-id ] history [ slot slot-number ] [ |
{ begin | exclude | include }
regular-expression ]
display stp [ instance instance-id | vlan
vlan-id ] tc [ slot slot-number ] [ | { begin |
exclude | include } regular-expression ]
98
Remarks
—
—
Required
Disabled by default.
Security
Remarks
Available in any view
Available in any view
Available in any view
Available in any view
Available in any view