Table of Contents
Advertisement
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# Enable root guard for GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp root-protection
Related commands
•
stp edged-port
•
stp loop-protection
stp tc-protection
Use stp tc-protection to enable TC-BPDU attack guard for the device.
Use undo stp tc-protection to disable TC-BPDU attack guard for the device.
Syntax
stp tc-protection
undo stp tc-protection
Default
TC-BPDU attack guard is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
With TC-BPDU guard, you can set the maximum number of immediate forwarding address entry
flushes that the device can perform every 10 seconds. For TC-BPDUs received that exceed the limit,
the device performs a forwarding address entry flush when the interval elapses. This prevents
frequent flushing of forwarding address entries.
Examples
# Disable TC-BPDU attack guard for the device.
<Sysname> system-view
[Sysname] undo stp tc-protection
Related commands
stp tc-protection threshold
stp tc-protection threshold
Use stp tc-protection threshold to configure the maximum number of forwarding address entry
flushes that the device can perform every 10 seconds.
Use undo stp tc-protection threshold to restore the default.
Syntax
stp tc-protection threshold number
150
Advertisement
Table of Contents
