Use undo stp root-protection to restore the default.
By default, the root guard function is disabled.
Configured in Ethernet interface view, the setting takes effect only on the interface.
Configured in port group view, the setting takes effect on all ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
You cannot configure root guard and loop guard on a port at the same time.
Related commands: stp loop-protection.
Examples
# Enable the root guard function for Ethernet 1/0/1.
<Sysname> system-view
[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] stp root-protection
stp tc-protection
Syntax
stp tc-protection enable
stp tc-protection disable
View
System view
Default level
2: System level
Parameters
None
Description
Use stp tc-protection enable to enable the TC-BPDU attack guard function for the device.
Use stp tc-protection disable to disable the TC-BPDU attack guard function for the device.
By default, the TC-BPDU attack guard function is enabled.
Examples
# Disable the TC-BPDU attack guard function for the device.
<Sysname> system-view
[Sysname] stp tc-protection disable
stp tc-protection threshold
Syntax
stp tc-protection threshold number
undo stp tc-protection threshold
144